
Pretty immature statement
Those are mostly 18-yo script-kiddies with no experience at life. The ones that should be punished are web developers that make such unsecured applications and take tonnes of money for them. Nowadays anyone can run fully automated scripts that extract credit card info using Google, the thing is those kids aren't fully aware of what they're actually doing.