Comment by envp

There’s already regulation affecting SDLC practices in the financial industry (SSDF in the US, DORA in the EU).

Definitely not a stretch for other (“important”) areas to start receiving such attention in the future.