The UK has a chance to lead the world in proactive software security - but only if we move beyond patchwork fixes.