This applies to every industry and consequential process unfortunately. Take something like GDPR deletion requests. Many mid-to-large organizations have automat

This applies to every industry and consequential process unfortunately. Take something like GDPR deletion requests. Many mid-to-large organizations have automated flows setup to purge accounts after users make requests after very detailed planning with legal and compliance teams. Companies assume this is the end of it and that they don't have to audit and perform maintenance at the engineering team level because it's something that someone in support or another team shoved off the side will own. What you find is one time it's not purging file uploads, other times it's not purging user PII, etc. This all comes back to how poorly we integrate the solutions we build. The position of engineers is such that a free pass is often given for failures like these that are fairly well obscured from view. Similar failures for different roles within the same companies get treated differently. While engineers hold outsized power, it is very difficult to completely address these issues.