You're (thankfully) never going to get a legal framework that allows "white hats" to test another person's computer without their permission. There's a reason

You're (thankfully) never going to get a legal framework that allows "white hats" to test another person's computer without their permission. There's a reason Good Samaritan laws are built around rendering aid to injured humans: there is no equivalent if you go down the street popping peoples' car hoods to refill their windshield wiper fluid.