They do need to be held accountable, and their access to systems like this needs to be limited and/or stopped.

If punishing bad actors alone was enough we wouldn't have a ton of 4th amendment case law.