I think we should not require person to be certied rather the code to be certified by a body. I think we already have this for Infra like PCIDSS and there private companies. Now if some one setup a company and work insure for cerified code it will be great
And people should demand for such static analysis like now we do ask https connections