Even if she followed the rules that doesn't mean she should be absolved of guilt. You can follow the rules and submit a PR, have 2 code reviews and plenty of tests, if you brake production then you can still be fired for incompentency.

The fact that 2 reviewers approved her change doesn't mean that she has the right to send notifications like this through a browser extension.