Also even with CS you have this. To use security as the comparable system, everyone involved in an application should be engaged and aware of security as a comp

Also even with CS you have this. To use security as the comparable system, everyone involved in an application should be engaged and aware of security as a component and goal. Anyone should feel empowered to raise security concerns. You still have security experts who are more knowledgeable than the average developer who build (or collaborate on) security critical subcomponents and who audit/red-team the system to ensure security. The same can be true of ethics.