I think the pitch invaders not just getting on the pitch but being left completely alone for over a minute on the pitch before anybody even thought about trying to get them off was the most damning thing. Even the players and management were looking puzzled as to why nobody was after them. That's an immense security risk and I suspect they'll be severe punishment for that.
Just be thankful the dippers, Who shamefully didn't even qualify for the tournament, weren't involved in this final, with how easy it is to get into wembley without a ticket it would have been complete and utter carnage that would have made Paris look dignified.