It's a complex issue, because often the answer "it's not worth it" is based on company's ability to make someone else pay for the consequences.