Somebody set you off on the wrong foot. Offensive hacking is also used to check if the security framework in place is sufficient to withstand an attack. Or to identify possible problems that would facilitate a black or grey hat hacker with illegal/malicious intentions.
Because the minute you connect something to the internet, the first attacks will follow soon. There once was a time that the volume of these attacks was rather moderate. Now you get a couple of hundred to millions of attempts every day, depending on the size of the whole infra.
States think that they can hack or intercept whatever or put filters in place to prevent access to content if it does not fit whatever agenda. They also like to register you as much as possible: on video, with an electronic ID, biometrics. That stuff combined with everything you created for fee on some social something, that was also keeping your location, phonebook and know all your friends. Then you have the copyrights sharks that prefer to deny fans access to music because not profitable enough with their set of filters and fines. Another chunk of interesting data, musical preferences, who's listening to what.
As anyone hundreds of registrations or subscriptions for something on the web, left a digital trail of passwords and email, or even your home address. Without any doubt a couple or dozen or even more were once hacked or 'accidentally put online'. Large multinational corporations of the type that was against 'ethical hacking' as Sony. Well at least we know why :-) And if you think it can't get any worse: dive into the world of 'smart' devices and the ....:drumroll:..... internet of things, a free botnet/swarm of broken by design, no longer supported, no longer updated or default configured devices. Those things create various opportunities to fake an identity or to rob data off all devices near that cheap 50$ Chinese NAS that had scans of all ID and credit cards + the letter from the bank with the PIN and the family foto album and a week later a notice that somebody used your card in an ATM in Zanzibar, somebody logged on to your bank account and changed in which country your card can be used and set the amount to withdraw to the maximum.
Now who's the bad guy?