"pursuing advanced exploitation" when explicitly given a sandbox in a VM and a benchmark problem involving a cyber exploit very clearly excludes hacking third parties. I think writing out the event in a 3 point list like that is disingenuous.
This is basic alignment, not even a tricky or ambiguous case.
I do very much agree with your take on culpability/military parallels, though.