FWIW, #3 is from the original owner who sold the site to Karpeles in 2011. Doesn't excuse #1, #2, and many other things, though.
Interestingly, the leaked business plan mentions McCaleb apparently still owns ~12% of Mtgox shares. Why? My theory is that it's related to the hack shortly after the sale: McCaleb had said on Bitcointalk that he no longer had an interest in Mtgox but was going to be paid royalties for a time. So perhaps after the hack, McCaleb, to avoid putting cash pressure on Karpeles's damaged Mtgox, agreed to turn the royalty debt into equity.