It may well be a terrible analogy, but your comparison is also terrible.

Basic expectation for any web business is security sufficient to not leak PII (and it's the law almost everywhere). Meanwhile no-one expects, as a basic requirement, that buildings withstand plane crashes.

When buildings don't meet basic safety requirements then people sue. It's a regular occurrence, unfortunately.