Eliminating information dissymmetry, by showing to the rest of the world what -given the simplicity- undoubtedly many other people have already found out (but have kept for themselves).
For that to hold reasonable ethical weight, you’d need to spread wide awareness of this tool. I’d say you qualify for that if, for example, you were to run this bot in some kind of “warning mode” that would join unprotected groups and let participants know of their danger.
Fair point. At the very least it highlights the security model of OSS in general.