That's how basically all corporates operate, entirely to protect themselves.

If they didn't fire or punish their employee for it in some way, then it becomes "approval" of their actions and suddenly the criminal can sue the company for damages to himself to find some loophole to get paid bank.

Its part of the reason why "letter of the law" is often treated so derisively, because it allows for retarded chains of events like that to become the norm. Because technically X Y and Z until criminals win for doing crime, when anyone with a brain would just tell them to fuck off even if technically.