That's simply not true. Having certain knowledge can put you in a vastly asymmetrical position as far as white or black hat goes. I'm in that position myself.

That's simply not true. Having certain knowledge can put you in a vastly asymmetrical position as far as white or black hat goes. I'm in that position myself. I've enough attacks and some 0days that I could retire off a rather small bit of work (I discovered one guy making $30k/mo recurring off of an amateur attack). Instead, I'm trying to start a security company. It's loads more work and probably not as much reward, at least easily. In fact, it would not be hard to find people where you might say the opposite: they're insane for not being a criminal.