Why only CMDR on CMDR? It should be applied to violence against NPCs too. The game does not differentiate between NPCs and CMDRs, a death is a death.
I do agree that the security level of a system should mean something and it should make certain actions harder to accomplish. I also would like to see the skill and outfitting/engineering level of NPCs to be closer to CMDRs.
It depends on who is doing the punishment.
Local security should treat everyone the same... A citizen is citizen...... In lawless systems therefore there would be no issues here at all from this
NPC's however could hire assassins to try to take down a ship who runs amok even in anarchy (this happened in earlier elite games with messages like "you really should not have messed with XYZ (insert random name of person you either blew up or did mission for/against earlier).
However the pilots federation would be a totally separate entity . They are the people who have to actually pay for our insurance and remlok systems ...... Efforts like the DG cost them many billions of credits. Because the PF only pay for ship's of its members they would likely only care about those and to hell with non members (NPC's) and any PF retribution would be carried out due to the mayhem caused regardless of where it happened.
Perhaps they would have to tolerate legal killings and for game reasons perhaps they would have to tolerate pirates who DONT actually destroy their marks and just steal. (Otherwise it would Bork player piracy and bounty hunting).
PP is an interesting one. I would suggest PP needs changing so that we actually do PP work in faction supplied ships (which get better with long standing loyalty). That way when we get blown up there it is the PP faction who carry the cost not the PF.