To me this list reads as: 1. Don't do attacks all systems are vulnerable to. (DDOS, Brute force) 2. Don't fuck with our customers. 3. Don't fuck with our emp

To me this list reads as: 1. Don't do attacks all systems are vulnerable to. (DDOS, Brute force) 2. Don't fuck with our customers. 3. Don't fuck with our employees. Sounds very fair for a company with hundreds of people hanging in the middle of the air at any given point in time. It is not an audit or internal code review. This is bug bounty program. If you get to a position from where you can directly or indirectly affect live systems, you should stop there and report.