Someone being able to take over your account, read your DMs, and impersonate you is pretty serious. Should be treated as a data breach with serious penalties.
Sure, but it's not life-critical, lives don't depend on it.
Other engineering disciplines have different rules, because for example a bridge or building with a fault might cause the loss of life of hunderds of people.
