Yes. There are people who are employed as Penetration Testers. Their job is to hack systems to find the holes so that the system administrators can patch those holes before a malicious hacker finds them and exploits them for nefarious purposes. However, honest people don't deface websites or use their skills illegally.
Point taken.
Kinda like locksmiths being capable of opening locked doors without a key...quite different from a burglar.