The person who @'d the Epic org owns very little of the blame, in my opinion. If you have a button that causes 60m+ emails to be sent, and you leave it in a public place with no warnings and no confirmation dialogs, that's your bad choice. The person who presses the button is incidental; someone was going to.