Ex-Uber security chief Joe Sullivan “is being punished for something that actually happens all the time, and for which we don’t have good legal guidance,” former Facebook security chief Alex Stamos said.