An engineer is liable but so is the firm. A doctor is liable but so is the hospital. I’m going after both.
How would making imported workers liable do anything but disincentivize them from committing these crimes?
Obviously we should hold leadership liable and responsible for harms of their choices and make this stuff illegal. Once illegal, then everyone is held to that standard of course.
Don’t assume I’m lacking empathy. The goal of holding engineers liable is to protect the public against malicious software. Protecting the engineers is unrelated to my comment. You can have both. In fact, real engineers are mandatory whistleblowers, and protected.