You're thinking it's ridiculous, but this is exactly what happened to Weev. He found URLs that were not 'supposed' to be exposed, which apparently constitutes

You're thinking it's ridiculous, but this is exactly what happened to Weev. He found URLs that were not 'supposed' to be exposed, which apparently constitutes unauthorized access... You know like typing in a URL to the browser instead of clicking a link.