From what I've seen people want jail time because of the insider stock trading, not because of the security problem itself. So a webdev wouldn't be responsible unless they also engaged in insider trading.