Just because investigating these holes are against TOS, doesn't mean they don't exist. Some are big enough to drive a truck through, and if companies aren't aware, less 'benign' hacking in the form of awareness can cause issues with much more impact.