Millions of privacy violations should earn them the corporate death penalty, not a 5 billion dollar “cost of doing business.”