I don't know, it's pretty on topic, isn't it? This is the problem other big companies, e.g. banks and oil companies etc who get caught with the hand in the cookie jar. There's clearly a line where the company _shouldn't_ get to perform its own investigation.
Maybe not for flipping some customers the bird, but I'm not sure whether or not it's legal cuts it either as a line. There are a lot of things you can do which are not illegal but which might warrant a mob.
Obviously, again, not for some intern prank.
I feel the police is the perfect example for when you don't want the "team" to decide if they did something wrong.