If you redefine terrorism to remove the dependence on violence, unless I missed something in the article? I don't personally believe that trying to find security flaws terrorism.
they aren't just trying to find security flaws... they probably buy/find most of them so that they can use them (it might scare and/or terrorize some people to be watched and controlled at all times)