Sounds like a white-hat stuff to me - probing the security and reporting found vulnerabilities to owners. Genuinely curious - why do you write it like this a bad thing? As long as they don't exploit what they find, of course.

Better let good-intended actors do that before ill-intended actors do the same.

I think it’s an awesome thing to do. Heck I think they should push even harder than they’re currently doing. This is the only real way that I see governments can practically enhance average national security.

I wrote that as a way to counter the assumed image of him being incompetent because he himself doesn’t use computers. Perhaps it was unclear.