No, it is not sufficient. The problem is that it is possible to design malicious systems which through incentives, ensure that illegal acts will take place, ye

No, it is not sufficient. The problem is that it is possible to design malicious systems which through incentives, ensure that illegal acts will take place, yet only low-level actors are ever punished. The people who architected the systems and made the decisions statistically guaranteeing illegal activity escape punishment through plausible deniability and abscond with their ill-gotten gains. Besides this scandal, see the failure to punish any executives after the 2007 crash, or Carrie Tolstedt and John Stumpf of Wells Fargo who even after clawbacks retired tens of millions of dollars ahead, etc.