I agree, and any time there is a security breach, bug or other employee-caused calamity at a tech company that results in a lawsuit or settlement, the money should come out of employee 401k accounts, stock options, etc. These people need to police themselves. By aligning incentives it will encourage the good developers and force out the bad ones.
One benefit of a 401k account over a pension is that the individual beneficiary controls the account, and not some other entity who can be sued for something an individual employee had nothing to do with. Indeed, pretty much every personal financial advice thinker would advise an employee not to put their own company's stock in their 401k, in order to avoid a source of company-specific risk.
Not sure if you're trying to be clever (in which case I'd encourage you to just say what you mean next time), but financially penalizing a company for bad behavior absolutely is one way to pierce the corporate veil and ensure workers aligned with corporate health (through things like stock, continued employment, etc) are also aligned with societal health.