There should at least be something resembling an attempt of investigating, who, where, and when signed an order to implement this shit into their products. That way they will at least think twice if they want to risk the chance of being held personally responsible.