Code of Practise?

Is a code of practise really necessary?

Surely this is similar to someone conatcting a high street store and saying they know a way of disabling their shutters. They will not disable their shutters but will tell everyone how to do it if the store doesn't pay up

Or even; I know a bunch of people who'd like to smash up your office if you don't pay me not to tell them. That's called protection.

If Jared had been contracted by LinkedIn to find bugs that's one thing but he didn't do that.