> Its not an issue to adhere with your private money if your product isn't causing damages.

Might happen really easily though. E.g. you install some package which has been compromised, infecting your software product and suddenly all your customer's systems are cryptolocked and you are on the hock for millions of €€€.

Or your db crashes in new and creative ways and your backups don't work for some reason and now your customer lost an expensive contract because critical data that was in your db is gone.

Of course, you can try to foresee every eventuality, but you will indubitably overlook something and probably never make it to market.