“Our employee pushed bad code by accident” is VASTLY better for them than “we didn’t secure the infra that pushes updates to millions of machines”.