I don't know the details of what kinds of actions this group actually undertakes, so maybe I'm wrong with this assumption, but by publicly exposing sloppy security without actively endangering people or demanding ransom payments, they are probably tempering security of their targets in the long term by exposing sloppy security practices. Free pen-testing.