[patcon]

Isn't this just a white-hat/black-hat hacker dynamic, except in this case the latter is legal?

[ironmagma]

Well, both hats ostensibly are at least doing real work (finding vulnerabilities).