The incentives need to addressed and they're missing, there arent meaningful economic and reputational consequences for management

And software engineers do plenty of unethical things when the consequences are removed and the payoff is good. How many of us operate under the immunity of “lol they’ll blame russia”