A lot of that is just developer/general employee incentives. As an employee, it is far more important for me to avoid blame than to be efficient as I will get

A lot of that is just developer/general employee incentives. As an employee, it is far more important for me to avoid blame than to be efficient as I will get no credit for marginal improvements/no hit for marginal harms, but will get blamed if there is a very noticeable bad incident. I am far more likely to have an annoyed boss from the wrong person showing up to work than driving away 100 candidates as the interview seemed hostile. So the calculation is heavily weighted towards fortification for me as an employee, as I benefit not from the enterprise value but do from the value of my boss not being annoyed with me.