Scriptkiddie level people should just be honest that they are doing checklist audits to see if administrators are doing their job. But unfortunately we are on

Scriptkiddie level people should just be honest that they are doing checklist audits to see if administrators are doing their job. But unfortunately we are on the hype train where everyone needs to be "cybersec/offensive/pentester/ethical hacker". In the end, cannot really blame them entirely because otherwise CEO and CFO types are not going to hire them and they won't earn money.