Looking at NIS2, that mindset is actually developing: "personal liability for members of management bodies".