Protecting white-hat hackers could be seen as a reduction in "regulation", since it permits the good guys to do good things. It allows people to
do more, but some people will be not be legally shielded from embarrassment and accountability anymore.
In the current status quo, everyone except the good guys gets free reign: companies can stop legal scrutiny of their security, black-hats run wild and answer to no one, and the white-hats wring their hands "please sir, may I check for myself that the services I depend on are secure?" to which the companies respond "ha ha, no, but trust us, it's secure."
