I don't understand this way of thinking. They made a serious security oversight, but that doesn't mean that they deserve to have their website defaced.
I think the rest of the sentence makes it clear the author didn't intend to support defacement as punishment.
I think the rest of the sentence makes it clear the author didn't intend to support defacement as punishment.