But stealing is still wrong. If that hacker had any morals he would of responsibly found the vulnerability and disclosed it to you in private to stop others from looting