When I blame Microsoft or any company I really blame people and culture developed by people, on this I fully agree.

The surgery analogy as scary as it sounds, it's very apt. I had 5 surgeries. For each a document had to be signed where all risks were listed, including my death, which was a small but real possibility. In the grand scheme of things, it's safer to assume that as a surgeon at one point or another you will lose someone on the table than not. Same goes for train drivers. It's nearly guaranteed you will run over someone during your career.

Care is a nebulous term as much as we'd like it not to be. Going back to my example of a password length mismatch, I did my due diligence, so did my colleagues who approved the PR, and yet it still happened. Why? Because the password length on the backend was never documented by the service teams. Only when the major incident happened, one engineer had a vague memory and started going through the code and identified the correct length. Yes, at some point, years ago someone could have done a better job to prevent my MI happening, but I would not call it carelessness. More like "things fall through the cracks".