Or the line between researcher and malicious actor is not super clear (Aleksandr Kogan was also a third party researcher after all), and its "easier" to have bl

Or the line between researcher and malicious actor is not super clear (Aleksandr Kogan was also a third party researcher after all), and its "easier" to have blanket rules against it?