Comment by ikeboy

Exploiting a server that exposes a root console by mistake would also be fine under the same logic. You haven't given any principled distinction between the two.