This is an odd take. My electrical power goes out more often than Windows crashes.
I don't recall the last time I've had Windows itself crash on me... Two years maybe?
But we're not talking about isolated Windows crashes. We're talking about the impact of a single update to low-level software rolled out to thousands of critical systems as a security compliance checkbox-filling measure. No regulation, no oversight. I'm not calling for Joey Highschooler to need a government-issued license to hack on his SaaS, I'm saying that all components of critical infrastructure should be subject to engineering best practices, including software engineering and software management.