Some of us just want to be engineers but know full well how difficult that actually is and want to be paid well enough to seriously research that problem. Thus most of us are experimentalists and prototype engineers, not ones making claims strong enough to be liable for.

Financial regulators are happy to do it.

https://www.networkworld.com/article/2225633/software/knight...

https://www.qa-financial.com/articles/cftc-fines-societe-gen...

https://www.ibtimes.co.uk/citigroup-fined-7m-over-software-b...

https://www.bbc.com/news/business-30125728

https://www.theguardian.com/technology/2013/mar/06/microsoft...

That is more of a failure of the imagination then. It's not like programming would cease to exist if fines were introduced.

>or negligence

Right. Companies like FB are entrusted with the private information of hundreds of millions of people. There should be investigations as there would be in a plane crash. If negligence is found, there should be appropriate punishment doled out.

This analogy does work. Boeing's software caused a plane to crash:

https://www.reuters.com/article/us-indonesia-crash-boeing/bo...

I'm sure it would be their top priority to tell everyone that the bug was exploited.