> their managers told them it was okay to do this, maybe that legal had given the go-ahead or that they had to do it to keep their jobs

I prefer to think about this. Management gets what it wants, you can always find someone to carry it out. I think we should be very careful about moving to blame engineers first.