I remember when the DOJ announced that and it still isn't good enough to protect security researchers by saying “we won’t prosecute, trust us”