If the cracker were being marketed by their creators as “the easiest way to steal money” would it be any different? Intent does matter. In fact for a crime to have been committed one has to prove intent. If the intent is to facilitate the robbing of banks, that’s different than “pen-testing” as a means to help/protect.