When will devs stop hardcoding passwords? smh.
In the case of computer engineers maybe they need to be legally responsible directly for this kind of stuff.
Unless it was malicious (and you/government can prove it), it's companies fault.
Don't you think that management deserves a share of the trophy? If everything that goes wrong with software is blamed on engineers, then what do we need management for?
For example they may have failed to ensure that sufficient resources are available to do code reviews, or they may have cut corners by assigning a project to a junior that should have been assigned to a senior, or by assigning a project to one developer where three are needed, or by setting unrealistic deadlines that put people under unnecessary stress, or by telling them "It's just a quick PoC" and then later "We need that on production yesterday".