They are innocent under the law, not necessarily innocent.
One reason we're not doing that, I suspect, is that it's hard to figure out what such a reform would look like. What specific additional step could the police have taken to determine that she didn't operate this account, without access to her private knowledge that she's never been to Arkansas and doesn't have the type of phone that was used to create it?