They may be non-malicious, but they show that someone with an intent to harm could do far worse and that most are completely unprotected.
Its better to expose problems than live with the false security that none exist. The false security leads to much worse breaches when they happen (see Sony) would be nice if Lulz hacked Sony 3 yrs ago and went public.
