Perhaps for one person doing it a few times and competently patching systems. What happens when a more novice grey hat tries it and bricks the machines? What h

Perhaps for one person doing it a few times and competently patching systems. What happens when a more novice grey hat tries it and bricks the machines? What happens if they patch the routers with software patches that have embedded malware? Ultimately, patching systems on the internet means you are very likely crossing jurisdictional boundaries, so beware what governments you might piss off. Personally, I like that prosecutors in the US are ethically bound to understand why the suspect did what they did (their intentions/motivations) and that prosecutors have the duty to prosecute only cases that they can convince juries to convict on. More than that, prosecutors rarely have lots of spare cycles, so they have to plan+choose their prosecution resources judiciously. And then civil liability is very different from criminal prosecution.