Who is liable in case of accident (financially and legally)?
The car (no legal existence), the algorithm (no legal existence) a developer doing a library that fails and has been used without is knowledge (nop), the developer integrating without control (nop), the scrum master who pushed a bad choice? the financial director for not caring about the cost of risks? The CTO .... no one is liable. Liability is diluted.
Who will pay when people will die?
And given VW dieselgate, RSA weakening of crypto, the actual world does not seems to support software engineers caring about their users or regulations.
When I use my computer, if it malfunctions and hurts someone, its the manufacturers fault (think DELL w/ bad batteries), if an engineer was deeply negligent they may take on liability, but generally the company. If I use my computer for bad I am liable. So on and so forth to wherever the source of the fault is.
My mother that still has an economical activity is losing money with modern technologies. And no one is liable.
It is is the "user's fault". The keyboard chair bug.
If also so many people get fucked by the oldest trick on earth of executing arbitrary software by trusting an unknown source it is clearly an information problem.
Either the industry is unable to make the information clear, or the information presented is not adapted to human beings.
In both cases, given the number of victims and money lost do you really think that this industry considers itself liable? Users are treated guilty by default in the mind of the companies.
The PR of IT is that all the bugs from software is the fault of the users. It is denial.
We (software industry) are the root cause some people lose money and no one can sue us for this.
Because we impress them with our confidence. And they believe us.