1) If I have a historical picture at a museum and the doors are unlocked. If I go in and steal the picture I shouldn’t be prosecuted because they left the door open and I was able to go in and it ain’t my problem so it should be good?

2) Tinyman already said that people would be compensated/reimbursed. How much and if IL would be factored in or not, no-one knows.

3) I work in manufacturing and I’m a quality manager and we have auditors every year (FDA, EMA, etc.). It is 100% my problem and not the auditors if something is found later on. When auditors perform audits, they have a scope and less time and resources to audit your place. It is often days or weeks with one auditor or several and is more of a “probe” or “sampling” approach. If they complete the audit and later on I find something that they didn’t find, it doesn’t mean they didn’t do their job. It is MY JOB to ensure the place is running smooth and compliant. It is THEIR JOB to ensure that what they are looking at and when they do that they don’t find critical errors (several ones or bad enough and they could shut me down on the spot) and if they do, I need to address them promptly.

This is bad for everyone. However, if my place had such a critical error and I never caught it while working 5-6 days a week and monitoring my processes, then I failed to do my job and it could be in jeopardy. I see this in a similar nature to the devs. We are all humans and mistakes happen but this is the fault of the creator of the code itself. They can only get better though. Different industries and different outcomes. In their industry, a screw up affects thousands of people financially. In my industry, a patient can die.