What is your alternative? Should we do nothing instead? Should all SWEs quit because they can't stop writing security bugs?
Maybe swes should start facing legal liability for thier failings like most other engineering disciplines. We would see this problem change overnight.