It doesn't matter whether or not Anon has a commercial interest or they're just being assholes. Their behavior is still unethical.

Additionally, it doesn't matter if self-protection is easy as in setting strong passwords or easy as in putting a helmet on my head or locking my door at night.

The ethical lapse is in the person breaking into the server, hitting me on the head with the hammer, or opening the door to my unlocked home.

Don't blame victims.