Someone being able to take over your account, read your DMs, and impersonate you is pretty serious. Should be treated as a data breach with serious penalties.
Sure, but it's not life-critical, lives don't depend on it.
Other engineering disciplines have different rules, because for example a bridge or building with a fault might cause the loss of life of hunderds of people.
We really need similar rules to other engineering disciplines. If your building falls with people inside, you killed them.