Probably many are, but for a person crazy enough to do such a horrible act such threats would also likely not work (either "nothing to lose" or "don't care about anything anymore").
As a society I think we can only try to avoid creating enough people who have "nothing to lose" or "don't care about anything anymore"... They're basically "cancer cells", once at least one survives long enough to "do it's thing" (recruit team, deploy destructive thing etc.), there's nothing you can do besides damage control, you don't "interrogate a cancer cell", they're either irrational, or have no rational reason to help you regardless of any threat or pain you apply.
But you're right, torture would only work for "regular criminals/terrorists" for which... one shouldn't need torture, threats and rewards for collaboration would be enough. But these "regular bad guys" would not do stupid s like mass attacks on "civilians".
Generally if you end up thinking you absolutely need actual torture you've already f up badly, you're seeing things wrong, and sooner or later s will hit the fan for you or your organization... it's more of a sign of incompetence!