2. All the hacking legislation (and criminal law in general) require proving intent, which so far as we can tell didn't exist in those cases. At best you can try some "reckless" or "negligent" angle, but that would a novel legal argument and would be risky to prosecute
No, they don't, see laws that make negligent behavior illegal