I never said the hacker shouldn't be liable. I said he shouldn't be criminally liable.
By your logic, if the manufacturer puts out software that is responsible for a death, would you throw the software developer who wrote in jail? That's silly.
All this stuff is limited to civil liability.