Security is a Concept. The theory about this concept, try to explain that everything is secure until something break what was secure. So, if we are alive, no matter where we are, we are secure, until something demonstrate that we are not. Therefor, in IT we have the defensive security and the offensive security.
As You may know, history don't deny that the offensive was always ruling, and therefor societies were destroyed because they were not secure. It is somehow a criminal perspective, that human kind develop, which is part of Economy Freedom. You can think about Trump, USA, Iran, Palestine, Israel, Russia, Ukraine, France etc. Sadly, Morality is not in the Roots of Military Education, and therefor, Countries around the World fight inside the Civilian Territory, without searching for a Empty Space on Planet Earth, to create a FAIR fight, between Soldiers Only.
By reading the News, You know that this " Children of God ", like more to attack each others than creating solutions.
-------------------------------
In the technical perspective, using the Offensive tools can be fun, while using Defensive tools can be boring. The emotional effect is the same for many other things that are part of what we need to do in life. Some bring us satisfaction others pain.
Since economy is based on speculation, we could hack economy by giving a break time of attention to the flow of speculation. With that, since we are not paying attention, economy value don't change. [ this was a Joke that is true and false at the same time] If I am not paying attention, my perception of change in reality, doesn't change.
------------In the Defensive Perspective, Ignorance is a Bliss-------------------
Security in a world that is educated to attack more than creating solutions, you know that attackers will attack what they know most. How you are able to attack something you don't know? It is a dual implication, that can be ignored in case of your non-popularity, while I am not so popular and I am target of many attacks against PHP Platforms like WordPress. In the human condition, words don't transform reality, and we can treat words like firewalls do in technology. We can drop them, by ignoring them, which means, by paying attention to something else.
Machines don't work like that, while they could. Chinese security systems are developing that way, where only a very defined network packages work on those systems and by that, everything that suffer a change is rejected. (Administrator cannot hack the system or an outsider) They are probably inspired by the Cisco systems, that are very secure but something dysfunctional, like OpenBSD can be to a normal user. Defensive security is slow, offensive is fast.
I agree that Pentesting needs to be legal in that aspect of being a tool to help the systems that already exist, to be more secure and more aware about the possibilities, that no one control, if not only, those who code.
Words can only effect you, if you understand them and deny them, while you may wish to think about their meanings, by creating an abstraction about them, using your own imagination for that, and by that condition you can create some new theory or a new philosophy about some aspect of reality.
Imagination[Abstraction] + Logic[Rationality] = Application[Philosophy]
which means: 1 + 1 = 1 OR 3 道