My main issue with this is that EFL have made up the punishment.
Both Leeds United 2019 and Crystal Palace 2014 are on record as having spied on clubs - Your club Man Utd had great concerns under Sir Alex Ferguson of clubs spying on them, there has even been concerns with clubs about drones being used - so to me it demonstrates there was a well established habit of spying on clubs, to which I have alluded since the start of this Southampton fiasco.
What bothers me is where did they suddenly pull this punishment from, booted out the play-off final, denied potential promotion to the Premier League and a four point deduction next season, I can't be arsed to look if they got a fine as well. If we rule break or commit a criminal act, we will have a good idea of the punishment, because it will be detailed somewhere. Bit like if you break the speed limit, fine and points. Southampton didn't (fine at best).
It's the equivalent of a Kangaroo Court, yeah rules clearly say you must not xyz, now we just need to make up a punishment to set an example of them, because they've admitted it and other clubs are crying - IF someone did this again, I'd say fair play you knew the punishment from Southampton and yeah it's a great deterrent but in the first instance it's about balance of rights, like the minimum standards in ACAS and if you haven't written the measures adequately you shouldn't be sitting round a table just making them up like the EFL, it's not the way you conduct a professional business and imho it's how corruption comes about when there is not clarity.
TLDR