This was also surprising to me, I'd think the firing would be automatic and then it'd be a legal case about unauthorized access of govt computers, which is generally taken pretty seriously.

You can't make the same argument with financial systems by giving someone at a different bank access to your bank just because you're both "financial professionals", and that's arguably much less sensitive data.