I'm in the outraged crowd and there should be pretty serious consequences, but it is important in the interest of justice to differentiate between fraud, negligence, and gross incompetence.
Discerning intent is a waste of time and resources in cases like this.
As long as you have some automated AI bot sent all the reports. It’s never fraud, you couldn’t have known it would do that.
Whilst I agree in principle that deliberate disruption of other people's websites/serivces should be more harshly punished, I don't think it's particularly practical. There's so many ways that modern companies can obfuscate the reasoning behind what they do, so I've come to the conclusion that if they're causing harm to someone else, then they should be punished/made to pay no matter their excuse.
If companies hide behind negligence/incompetence, then we need to make it costly for them to be negligent/incompetent.