Yes. To get redress I must pay hundreds of thousands of dollars in legal fees (try suing a company like Equifax or AT&T for less) and also provide detailed evid

Yes. To get redress I must pay hundreds of thousands of dollars in legal fees (try suing a company like Equifax or AT&T for less) and also provide detailed evidence of exactly what criminal organizations from all over the world have done with my data. Does this seem reasonable? If I fail to meet this standard does that really mean I wasn't harmed? And does this standard apply the other direction? If I personally test the security of a company without permission, do they have to prove that I caused actual damage before I am punished? If the moral standard applies evenly, then I should be able to try opening the vault, and if I fail, no harm done. The bank must show actual harm before I am punished. But no, there is no even application of moral standards here; when it comes to individuals testing security the act itself is criminalized regardless of whether or not harm was done. It is even a felony to experiment with physical devices you own in many cases.