Nobody would blame the coders if the customers were willingly exposing all their private info, would be the comparison. Nobody would blame the coders if an APT

Nobody would blame the coders if the customers were willingly exposing all their private info, would be the comparison. Nobody would blame the coders if an APT socially engineered their way into a well-programmed secure system. Everyone rightfully blames the coders if they keep building projects that aren't up to modern standards (and if their company asked them and allowed them the time and resources to build something secure. Otherwise, it's on management.)