Agreed, and I see your point, I just see it as the EO doesn't have the authority to (and thus doesn't actually) require such things from private companies and not that it requires something without funding.

In terms of what should be done, I'm not sure whether companies should be expected recoup their costs by raising prices, reducing margins or expect federal funding. My gut reaction is that this level of security should be a cost of doing business and not require federal funds.