The threat model was such that they thought the missiles in that region couldn't hit targets above 32,000 ft. MH17 was flying at 33,000 ft.

All rules bodies can do is make rules based on the best available information. Their information was wrong, but it's not like they didn't try.