The incentives for nominators to care were already weak, and DAP was the last nail in the coffin that permanently degraded Polkadot’s security.
The network already had to tolerate bad / malicious validators who took advantage of nominators who weren’t paying attentions. Post-DAP, they can now even collaborate with nominators to act against Polkadot as a whole, as nominators don’t need to worry about being slashed.
Governance can only do so much until blocks cannot even be finalized. So it unfortunately won’t help much here.
We’ll see in the coming months / years if our model holds. Bad / malicious validators aren’t being voted out by nominators is only one of the initial signs. We think there will actually be a particularly visible economical arrangement that will gradually become apparent in Polkadot’s validator community. Then we can know, with better certainty, whether the actual security level of Polkadot is really reduced to just 2M DOT. BonkDAO incident unfortunately means that a realistic attack will then be possible / likely.