Most people blame people for mistakes, and it can feel satisfying to blame people. But when a problem is systemic, it might be better to blame the infrastructure. If we can change infrastructure, we can sometimes make a much bigger impact on preventing problems in the future.
This comment is based on the npm security vulnerabilities and technical architecture, but it does generalize. Change the game and you'll get better players.
I don't mean to say this to bypass personal responsibility; I don't believe personal responsibility should be entirely removed. But if you're really interested in reducing a problem, make doing the right thing easier.