This happens because execs are cheap, farm out everything to dev shops, and the beleaguered, underqualified devs power out nonsense code to keep up with the arbitrary point quota for the sprint. No one knows how the whole system works, reqs change constantly so poorly-planned updates degrade the whole thing, and all the while actual patient data gets mixed into the big soupy pot of bullshit. Anyone who raises concerns about the situation gets to be the "compliance officer," thus passing responsibility from the people benefitting from the situation to the people who just want to keep their job.
I wonder what would happen if devs could say to their boss "no, this won't be released until we're confident in it" with legally enforced immunity to consequences.
I wonder what would happen if devs could say to their boss "no, this won't be released until we're confident in it" with legally enforced immunity to consequences.