No, I'm saying it was a bad idea to talk about what you did wrong to get caught. It creates the perception that you think exploiting flaws in someone's site without permission wasn't the big thing you did wrong.

Which, you can believe that or not, but in terms of mitigating risks perceived by employers, not creating that impression should be your #1 priority.