Good point, but the original comment was about whether the hacker was morally dubious, not the outcomes. If a bad actor does bad things because of what you did, you're not morally responsible for it — he is.