Unfortunately this sounds like a very wise advice.

You'd think that you rather encourage and reward researchers to ethically hack your systems rather than having the MI5 do it, as it happened recently.

(https://www.infosecurity-magazine.com/news/how-gchq-hacked-b...)