It comes down to incentives. I maintain that the problems for a system occur in proportion to how far the user is from the customer. In the sandwich case, the

It comes down to incentives. I maintain that the problems for a system occur in proportion to how far the user is from the customer. In the sandwich case, the user is the customer. You wouldn't eat the sandwich, because it might make you sick. In the software library case, the developer sees the benefits of using a library, but rarely sees any penalty if it goes bad. They'll earn the same paycheck, and probably even work the same hours. They might not even be the same team that has to deal with security issues in production. They get the benefit of saving time, and accept none of the responsibility.