And it doesn't, but the criminal behaviour then needs to be a personal one, not just like (and not saying this is the case) systemic issues at the company, regulatory oversight clearly insufficient or not preventative, no one person really specifically at fault through malicious action or reckless negligence so ehhh blame the CEO.