Corporations have more duties of different scale than individuals.
Starlink is a provider of Digital Infrastructure, and is already classified as "Essential Entity" under the EU CER-directive.
As such, it needs to comply with so-called "Physical-Cyber Convergence Requirements", which entails
1. Perimeter and Access Defense
2. All-Hazards Mitigation: Designing infrastructure to resist natural disasters, severe climate changes, or physical sabotage/terrorism.
3. Vetted Personnel: Utilizing mandatory background checks and security clearances for operators working in sensitive zones
Not much is known about this incident at this stage, and I'm sure the government will conduct own investigations. But regardless of the outcome, it will be the duty of Starlink to secure its facilities.