its just a fair demand i would say.
the white hat attackerrs never intendet to keep that etc or they would be as criminal as the black hat attacker in there own perspectiv ?