> That is an awfully authoritative statement to make based off what OP shared.
Which part do you disagree with? Maybe the 'much' on much less risk?
'given evidence' is true unless OP made op the story. (And even if OP made up the story then we're judging fictional people and the judgements are still valid.)
I think 'less risk' goes part and parcel with being administration rather than someone lower rank reporting a problem.
And it seems clear to me that it's their job.
So, criticism. Which is not a particularly harsh outcome. And doesn't necessarily mean they made the wrong decision, but them providing a justification would be a good start.
Inaction is often excusable when it's not your job. It's always important to look at motivations, but vilification can also be appropriate when there's dereliction. Sometimes there are no significant motivations leading to lack of action, there's just apathy and people that shouldn't have been hired to the position.