Yeah, these are not subtle embedded-systems bugs were talking about. These are frequently things that would make any halfway-experienced programmer or sysadmin

Yeah, these are not subtle embedded-systems bugs were talking about. These are frequently things that would make any halfway-experienced programmer or sysadmin refuse a release. If your security failure gets revealed and the entire software industry screams "what were you thinking?!", you don't get to plead that finding the bug was too tricky and complex. Hell, the Ring issue wouldn't even require one direct employee to avoid. You could solve that in a 30 minute call to an "is this obviously terrible?" hotline.