I had the same thought ... having a "get-out-of-jail-free" card lowers the risk for authorized pen-testers but how do you calculate the risk-to-reward ratio if you're actually a criminal? You have to figure that it's less than (e.g.) performing an armed robbery at a bank. So which of the service workers that come into our offices are legitimate? No idea.