I think people who create such spy-software need to go to prison for +10 years mandatorily. CEOs who are involved here should go to prison as well.