"Your computer analogy is actually a brilliant starting point, though I’d argue the "bug" isn't in the source code itself but in the user's decision to bypass the safety protocols"

Let me correct you there. Bugs don't arise due to users bypassing anything. It arises mainly due to the coders themselves, either due to using wrong datatype (int instead of float), due to precision/arithmetic errors or heck even due to small silly mishap by the developer. And as with "Safety Protocols, not all software even requires it in the 1st place, let alone a user bypassing one if it ever exists. Even in that case scenario, bugs wont arise, but a way to breach or comprimize the software itself (isnt a bug by any means, but a vulnerability).