My workplace is like yours in that someone simply installing a rogue piece of equipment without permission is not enough to get them fired, mostly just a stern "don't do that again."
On the other hand, if we had anyone just log into a router and kill DHCP, HR would have some paperwork to take...