My sister knows a doctor who botched a surgery due to an argument with a junior who wanted to do some step of the surgery. The senior one was not having it at all and just threw the scalpel directly at him. Nothing happened to him because if we start firing doctors for this, we would be missing out on all the surgeries he did successfully.

> Nothing happened to him

There is a world of difference between "nothing happened" and being fired. Just like in the NBA, a fine (monetary penalty) of a sufficient size will get someone's attention without losing their skills forever.

That's kind of obvious, I didn't think it has to be spelled out.

My point is that something doesn’t have to be malicious to be criminally negligent, if the law says so. I’m suggesting that some of the security breaches we’ve seen ought to have been criminally negligent. Perhaps they weren’t under existing law, but I think they ought to be.