they aren't being overly malicious, thankfully. think of it as like a white hat hacker. he's showing us what's broken and what needs to be fixed to prevent real issues in the future.