I think hackers are pretty natural at this type of thinking. A la “what this application is not supposed to do?”