He's not indicted for doing security research, he's indicted for stealing people's bank accounts.

The indictment may end up being bullshit, but it has not been for any of his white-hat, or grey-hat activities.