I'm not sure jailing the low level employee that pasted some javascript into a footer template, or the low level employee that sent them the link with an email saying "this is the script we need to add to our signup flow" is going to achieve very much.
This stuff happens because there isn't an exec approval process...
This stuff happens because there isn't an exec approval process...