I feel like this is opening Pandora's box. What's to stop people from hacking a business rival or other entity and claim a hack originated from them. Once they

I feel like this is opening Pandora's box. What's to stop people from hacking a business rival or other entity and claim a hack originated from them. Once they have access to the box they could plant whatever incriminating evidence they need to corroborate their claim. Who is responsible for service outages, degradations in service, damaged equipment if a pivot machine is damaged? How do you guarantee that these vigilantes only access materials related to the hack and don't run wild on the pivot machine's network once they gain access? As an analogy, imagine someone broke into my house and stole my computer. Should I be allowed to hire a private military contractor to raid all the safe houses or apartments my suspected assailants used to try to get it back?