Earlier quoted context omitted.
There is an inactivity leak that gets triggered if you prevent with over 1/3 of your votes from the network reaching consensus. Inactive validators start to leak ETH from their stake until they become less than 1/3 of the total stake and cannot prevent consensus again. https://eth2book.info/altair/part2/incentives/inactivity
Does the network recognize a difference between being inactive/offline and actively voting no?
By the way, there is a bug bounty program. You can earn up to 1M USD per critical bug either in the protocol or its implementations.