>I would also imprison (or at least fine) the company's security chief.

This is just incompetency. It is ridiculous to think that this should rise to the level of criminal negligence.

Of course there are good reasons to fire him.

The occupation "engineer" does come with liability, and such incompetence can (and does) result in prison sentence. Of course not "CS engineers".

(Would you call it ridiculous also, if it was an article about architect, who designed a house that just razed itself to ground after a someone shut the door too hard?)