“whistleblower” protections
One of the problems with the current laws when it comes to security and computer research is that there is no “whistleblower” protections, unlike those that are in place for people that expose fraud and things in other systems.
The U.S. Government wants sides with companies that make products or produce software for the most part. The lawmakers are paranoid about the internet (mostly because they don't understand it) and believe anyone who uses it is involved in either child porn or downloading movies/music or software. Anyone who researches security and exposes the chinks in the armor is a person that is a "dangerous hacker" bent on destroying the system and costing a company money.
We are not allowed to tell people that "the emperor has no clothes".