I remember a Darnet Diaries episode where a hacker took control of wind farm controller and decided to patch, update it and harden its security just so other hackers couldn't get in.

The security response team eventually decided to leave the hacker alone since he was just mining crypto and maintained the system "secure".