No. My point is that curiosity is valuable, but so is integrity. The scenario I presented is around the same level of malicious as pen testing a competitor's new credit card API. Specifically, both are potentially criminal acts of illegal computer access (by current laws in the US), and both have negligible impact on their victims.