Here’s the Email You Get When an OpenAI Model Hacks Your Organization: OpenAI will wish you the "best" after hacking into your company.

This doesn’t seem that bad to be honest. Disclosing they the access happened and what vulnerability allowed it to happen is a responsible course of action.

Only if you have a written authorization from the company you try to attack.
Else they are nothing better than a criminal hacker.

I don’t feel like many white hat hackers get permission to exploit these vulnerabilities to report them