An individual software engineer could be held accountable but they are not liable for actions not taken maliciously.