Appreciate the detail. I was responding to specifically the cybercrime legislation point, but I agree with your others.

I've worked in contexts where certain business activity (if it went wrong) was covered by strict liability and statutory damages per incident, and I'll say: it really changes how businesses behave.

Based on that experience I may be more open to and interested in strict liability in the civil context (not needing negligence or damages).