Well, "hacking is not allowed in the Netherlands".
But honestly, I think what they're trying to say is, we're happy if you report issues, but please don't commit a legal offense. This policy will not absolve you.
but would their legal team concur with that interpretation if it embarrasses them in the headlines is the real question. Despite being considered an otherwise odious character, Andrew 'Weev' Auernheimer was prosecuted for essentially doing something that revealed a flaw in a major player while doing nothing illegal. Getting flamed in the media changes a lot.