It gets complicated, you can obviously use any 'hacking' tool for red team operations, but tools that are published and were designed for such hacking (cracking

It gets complicated, you can obviously use any 'hacking' tool for red team operations, but tools that are published and were designed for such hacking (cracking, intrusion) still appear to be subject to legal control (in Europe; I guess like how encryption tools that are subject to defence controls in USA can obviously be used for non-nefarious purposes but it's still illegal to export them [or was in the past---browsers used to hobble the encryption built it---I think still is?]). Similar here, but worse than the knife/tool analogy: when you rip a copyright CD the system gathers all the data on the CD to present in the interface but doesn't warn you about the copyright; it is designed to rip commercial, copyrighted music.