Considering that we have de-criminalized pretty much all activity, I'm not surprised. But seriously, if I'm a middle manager and I find a problem with product X am I going to tell my boss or turn my back and wait for someone else to notice (or maybe no one notices at all). Now, if I point out the problem, it may cost Y to fix it (not to mention a media relations hit) and that means when it comes time for my performance review, the company just might find a reason not to give me a raise. When layoffs happen, my name might just go to the top of the list. Oh sure, I could try to claim it was retaliation for being a whistle-blower, but that's incredibly difficult to prove - and it takes years.
The math is very simple. If the cost of fixing a problem is X and the cost of not fixing it and the public discovering the problem is Y, then I have to try to determine the values of X and Y. If Y > X then I fix the problem. If X > Y I don't fix the problem. If people get hurt or die, that's too bad, but the "value" of that life is factored into Y. But my activity has been de-criminalized, so I may have to pay a fine (or rather, the company does) but I'll never see the inside of a jail cell. Now, had I taken a gun and shot the people I hurt with my actions, I'd be locked up. If they are killed because my mine blew up or there was an explosion on my oil rig, too bad so sad but I get off Scot-free.
It's like when my mother had AOL and they had limited local numbers, so she would call and complain and they'd give her a free month. She wondered how long this would go on. Again, it's very simple math. When the cost of all the free months they were giving away exceeded the amount they would pay for additional lines, they would get additional lines.
No one is going to put in their business plan "We expect employees to break laws." But you're being incredibly naive if you think it's not implied.