The difference in this case is intent.

Did the employee have the intent to cause damage? If so just fire him/her.

Malicious intent to be precise. Well-intentioned attempts to demonstrate issues for the purposes of helping to fix should generally not be punished, unless there is a wider fallout than expected and that can be attributed to negligence.