It's evolving into engineering. Look at a real engineer (the ones who need to get certified). What do they do? They review plans and calculations. They verify the plan complies with relevant engineering standards. They verify the solution is safe and fit for its intended purpose. They stamp it and accept legal and professional responsibility for whatever happens.

There's going to be less 'hacking' and more verifying that you've got E2E encryption and meet the privacy standards required... or justifying that this problem does not require E2E.