We’re not even at that stage of liability for software developers.

Except in a handful of limited cases, eg. medical and aviation.

We are. If I as a developer writes software that does a DDOS at another company I can be held responsible.