> Negligence isn't a crime in itself. It is an explanation or cause for other crimes.

Correct, like being criminally negligent of a child, if you leak data through long-known vectors (for argument’s sake), one could argue you are criminally negligent in securing the private data.

It doesn’t really go that way, often, now.

It could, as more e.g. water treatment and energy providing facilities get pwnd.