People have been threatened with legal action for discovering vulnerabilities before.