Isn't one of the premises of modern engineering that you work within a regulatory framework to ensure safety for the public?

It seems to me that most software development is not engineering in this sense and I assume that we will get to that stage at some point, but right now things like public institutions being hacked, because their software security was not up to par, will happen.