While I would assume that in most cases the primary fault would belong to the manufacturer/developer in your example, there is missing change control at every l

While I would assume that in most cases the primary fault would belong to the manufacturer/developer in your example, there is missing change control at every level. Each party should be asking "If something were to break, what's the worst that could happen?" This concept should be mandated at every level of software rollout that could endanger lives. Part of this is a failure of the software industry because we have perpetuated the narrative that stuff "Just works." which is dangerously misleading to the general public. The public needs to understand more about the practicalities of software through better education. As developers, we need to push robustness way further than the average company cares to produce.