I'm in a pretty different place on this than most everyone else in the thread, so it may mean that I'm the oblivious one here. Time will tell.
I don't think Cora's suspension is going to be worse than Luhnow's and Hinch's. I think it will be on par, or maybe a bit less. I also don't think the Red Sox should fire him.
A few things have been obvious before the recent revelations.
1) The Astros were doing something boundary pushing with video. They had public job postings for people working on machine vision, and a lot of people figured out they were trying to use computers to pick up pitchers tipping.
2) Cora knew or suspected what it was, and had very likely been involved.
The whole tone of the 2018 ALCS postseason was that everyone thought everyone else was stealing signs. Taubman got busted photographing the Red Sox dugout. Cora said some cryptic things that suggested he knew more than he was letting on. I haven't checked the game threads, but I recall that we were all talking about it.
3) The Red Sox have been pushing the boundaries on sign stealing for awhile. Pedroia (injured, but in uniform) and Holt were implicated in 2017 — pre-Cora — in a scheme which also involved the training staff and Apple Watches.
4) But there has been a ton of boundary-pushing madness in the last decade of baseball. The St. Louis Cardinals hacked the Astros and stole player evaluations. The Phillies were accused of having a dude with binoculars stealing signs. The Yankees have been accused of various things at the edge of what's allowed. A bunch of players referenced in this thread already have suggested these sorts of schemes are widespread.
5) The Red Sox' allegations are arguably worse than the Yankees and Phillies allegations, but much closer to that cluster of offenses than what the Astros were doing.
So the recent revelations that the Athletic has dropped in these stories don't actually shift this picture for me all that much.
What I see when I look at this is that the Astros have a particularly bloodthirsty culture, well outside not only the black-letter rules but also the grey areas a bunch of organizations seem to be inhabiting. (Manfried also commented on this.) From where I sit, the technologically-enhanced efforts to do what you are already allowed to do — steal signs — aren't especially egregious. Eckersley basically does that on NESN. Communicating those signs via semaphore from the dugout to the batters box in realtime is total madness. Cora participated in that culture when he was there, likely quite actively. He was the bench coach, and this scheme seems like an obvious bench coach area of responsibility. The report is all — "Cora was the only non-player involved." That doesn't seem surprising to me at all, but mainly because the hitting coaches have other responsibilities with the Astros at bat.
But unless it becomes clear that the Red Sox did a lot more than they have been accused of, then it looks like Cora's arrival in Boston brought a defensive improvement that allowed us to actually pitch to Houston. After how 2017 ended, I would be shocked if that wasn't a huge part of why the FO wanted him; it wasn't hard to predict in the winter of 2017 that any path to a championship during our window would go through Houston. But the only thing that makes these recent allegations about Boston worse than the 2017 Apple Watch allegations is that the team had already been warned.
So I guess I don't see how Cora looks like such a villain here. It seems like the Astros continued to do Astro things both before and since his lone season in orange and blue. It also looks like the Red Sox continued on a trajectory set before his arrival. Maybe I'm reading this completely wrong, but I think the Commissioner wants to be sure there wasn't any additional malfeasance in Boston before he decides Cora's fate. (If there was yet-unknown malfeasance in Boston post-Cora, then all bets are off.) But I don't see any indication of that. In fact, if the Commissioners' office has been poking around and these latest revelations are all they found about Boston, I'd say that's a good sign for Cora. Most teams probably have comparable skeletons in the closet, and I'd guess the Commissioner's office is coming to realize that. I also think it would be easier to set a defensible quarantine boundary between the Astros and everyone else than it would between the Red Sox and Astros on the inside and everyone else on the outside, when many of those other teams are suspected to have done things substantively similar to the Red Sox, but not similar to the Astros.
If I'm Henry and Bloom, I keep Cora. I have Roenicke manage during his likely suspension — that's why you want an experienced manager as bench coach — but make as clear as possible that the Red Sox are getting out of the sign-stealing game for real. Let Cora say some contrite things about how he got carried away during a competitive arms race and crossed a line, that he accepts the suspension as a fair consequence of his actions, and that it won't happen again.