Companies are not interested in not endangering their users. They only care about making money. So you have the make endangering their users negative on their bottom-line.

This is a perfectly workable system, that does not require any party to not be selfish. It's a much better system that those that require somebody to be 'good' rather than 'rational'