They have tried, and I have laughed at them.

"The attorney for the government should decline prosecution if available evidence shows the defendant’s conduct consisted of, and the defendant intended, good-faith security research."

https://www.justice.gov/archives/opa/press-release/file/1507...