You don't really need to "hack" to find vulnerabilities. As an extreme point, spotting your own username and password in a URL would not be considered hacking.
You may know that, but does the average person who might find themselves in a jury pool know that? Would they understand the distinction? To the average lady person, this would be like saying alizeran crimson is more than just a red paint.
