Mechanical engineers operate under the same assumption, though it's generally a stupidity standard vs a maliciousness standard. In this case, they absolutely should have recognized there was no backup to their (much more affordable) immobilizer design, and caught it in the early design review phases.