In the linked thread, they clearly mentioned that he's an investor in the company:

> Well, a few months ago @Aura_Protects reached out and asked me to show them how I hack – and who better to demonstrate this on than their investor Jeffrey Katzenberg?

The fact that he consented to it is also mentioned in the thread. How is that dishonest? I personally think the attack is interesting on its own, using a recent vuln that was widely reported in the infosec community.