Whereas the proposal is typically to make the penalties scale with entity size, which a) is actually easier to game than the scope of the harmful activity, and b) does a bunch of things that make no sense, like increasing the amount of the fine for an oil spill if the company also generates additional revenue from producing solar panels.
The reason we run into trouble here usually isn't that the penalties are wrong, it's that the enforcement is weak. If you can steal $10 billion with only a 10% chance of enforcement that requires you to give back $30 billion then your expected value is an $8 billion gain. But that has nothing to do with the scale of the business. The exact same thing happens to with a company that steals $10,000 with only a 10% chance of enforcement.
And using disproportionate penalties doesn't really fix it either, because then they just roll the dice and file for bankruptcy if they encounter enforcement. You can't fine them more money than they actually have. When the rate of enforcement is too low, that isn't enough to make them comply, because a small chance of -100% is profitable against a large chance of +50%. Whereas if enforcement is consistent then disproportionate penalties aren't even necessary.