IMO, security researchers have the legal and moral obligation to contact their research target before conducting research. If said target refuses their request

IMO, security researchers have the legal and moral obligation to contact their research target before conducting research. If said target refuses their request, the security researcher should have the legal right and moral obligation to publicly disclose that their request to conduct research was refused. And that's it.