It applies to software engineering too in things like autoscaling. I’ve seen many DDOS outages caused not by the attack itself but the wave of autoscaling that takes things down (often well after the actual attack ended).