The only way to realistically enforce this is through software developers refusing to implement, like that’s gonna happen, or by whistleblowers, but by then, it is already too late.
Not sure how the heck would a single developer refuse to implement a system that earns boatload of money.
The other approach, which is employed by other specialties, is to have a professional trade accreditation group create certain standards that must be upheld by all people in that group. Doctors and lawyers are examples of how this works, and in what ways it fails too.