For critical stuff, there is already a ton of regulations in place that prevent this kind of thing from happening. Why do people think programmers working in such industries have no oversight and can ship whatever they want and however they want? It simply doesn't work that way in those industries.

It depends I imagine. Core bankend bank system, database, transactions and such sure, but what about the web and mobile client? I'm down to get better customer experience if they can ship faster without breaking the bank.

What about fraud detection and prevention? I hope to think I'm not alone in that perspective that it's acceptable in those cases.