You only notice the cases where you try to reproduce things, and time being limited ,you only reproduce obscure results. As a comparison: I did a bunch of mat

You only notice the cases where you try to reproduce things, and time being limited ,you only reproduce obscure results. As a comparison: I did a bunch of math too and in some cases just accepted the proofs I build on. Same for programming: I neither audited lapac not GCC. For the engineering crowd software dependencies are a probably a good comparison. If they come from a credible source you trust them and build on top of them. Nobody blames companies for not auditing the kernel if there is a security problem in it, but everybody screams: “You should have verified the result”, if some paper is redracted.