The attack was perpetrated via a vulnerability in the “Find my iPhone” application that connects to the user’s ID.
Keep away from the dilemma because you feel it would be unethical ?