I think if you hacked a bunch of people and then were like, "see, look, you're vulnerable," it would be seen as a violation of privacy and professional ethics. You'd be in serious legal jeopardy.
When I was young and foolish I did similar things, and I regard them as mistakes. On one occasion I accidentally endangered an untold number of people, likely thousands, and I'll never know what the consequences were; they could be nothing, or I could've gotten someone killed, and I'll never know. (Please note that I have grown & matured, and don't engage in similar behavior anymore.)
The same goes for spreading bullshit. It's not proving a point about a potential harm, it is knowingly perpetrating that harm. And you have no way of knowing what the consequences are; what people do with the bullshit you've fed them.
You don't need to create bullshit to illustrate this point, there's plenty out there in the wild to choose from and write about.