I agree that everybody needs to follow responsible disclosure practices.

I think you are confusing two terms, braking the law and hacking. While hacking can be braking the law, most often it is not. Not all hackers are criminals.