I worked with them and know that before they release software they do a risk calculation. They do it even for small mobile apps and if the risk is too high beca

I worked with them and know that before they release software they do a risk calculation. They do it even for small mobile apps and if the risk is too high because they would need to regain public trust they don't release that app / software. So how in the world can it be that they released this? Normal employees there are not allowed to make such decisions.