There must be some community discussion in every case. I think we can agree that: Developer A bypasses the QA system to make money faster is bad. Developer B bypasses the QA system to steal passwords is much worse. Developer C bypasses the QA system to brick devices is even worse.
Do they all get the same announcement "Developer bypassed the QA system and software has been removed."? Or do Developers B and C get a more detailed announcement? So that the community is aware they were acting in a very anti-social manner?