My point is that it's not in their job description.
They're job description is defined by law, it is in fact their job description to be responsible for the actions of ALL subordinates.
They make decisions. They don't manage.
You're an idiot.
Jailing the CEO over a data breach is as fucking stupid as jailing the Superintendent when the lunch lady undercooks the meat.
Right, its in no way the responsibility of the person above you to validate and ensure you're doing your job properly. They have no responsibilities at all. You can totally do what ever you want and they have nothing at all to say about it. You will in fact find, in your example, IT IS STILL the responsibility of the superintendent to ensure that the lunch lady cooks the meet properly. Doesn't matter if he's 80 light years away, still his problem, thats what it means to be on top.
You're an idiot.
If you weren't busy drinking mercury on a regular basis, you would understand that the CEO of your typical 5000+ employee enterprise isn't the person that should be programming the fucking database, you dumb-shit motherfucker.
If you weren't suck a ignorant moron, you'd realize that the CEO doesn't have to know how to do it to still be responsible for the actions of every single person in the company and what they do as part of the company.
Of course we don't go after a CEO because one guy steals a bunch of data. We put the CEO in jail because he didn't make it a proper priority to protect the data. And the we put every single person in the food chain between the people who actually did it (software developer) and the CEO. And maybe at that point, dipshits like you will get the fucking point that you are responsible for your subordinates.
Probably not because ... you're just another idiot who thinks he knows all about the world but doesn't even realize that a corporation is a legal entity created by congress, and that the officers of the company are in fact legally responsible for the companies actions. ALL OF THEM. The benefit of it is that we as customers can't sue them directly because of something that goes wrong at the company and causes it to go out of business because of simple failure ... it also means, in exchange, they assume legal responsibility for the actions of the company.
You can tell everyone they are wrong all day long, but you won't magically be right because you repeat it enough.