this is already an established principle in other engineering fields. If a civil engineer screws up and a building collapses, both that engineer and the engineering firm are liable.
Why should the software industry be any different?
Why should the software industry be any different?
And some call themselves code monkeys, they know how to follow orders, but have no incentives at all to think by themselves for proper security.
Only a tiny fraction call themselves engineers.
I favor non-licensed free professions, but if you're free you should be able to follow best practices and be able to think for yourself.