> But to ask some basic security/reliability from companies, foundations etc... Shouldn't that just be normal?

For SW ? No way. For electronic components, yes, for mechanical components, yes, but not for software. It is not cool. Fixing bugs is much, much harder than modifying UI elements (hello Google, Microsoft) with every release.