How is this unprofessional behaviour ?<p>They are trying to condone the behaviour of data access which in all honesty falls on borderline unethical behaviour.<p>Any professional who participates in any company&#x27;s bug bounty should respect their rights as well.<p>Whether the keys were accessible and it is a technical blunder is secondary but the action  the researcher took a) accessing the data he did not need to b) making this into a big deal when he was the one not respecting the bug bounty&#x27;s limits makes this a case for FB.