Keep away from the dilemma because you feel it would be unethical ?
The attack was perpetrated via a vulnerability in the “Find my iPhone” application that connects to the user’s ID.