Unfortunately, these tools are so damn useful that people almost feel compelled to buy and use them. Eventually, as these attacks becomes more and more commonplace, I think companies will start looking for two things:

1) How secure is the software? Where are the audits?

2) If your software compromises my business, how much of the losses I incur as a result will you cover?