Same here. Ultimately, the engineer is the one typing in the code and hitting submit. They are at the very least complicit and need to at least share responsibility.