It’s a test with a good excuse. If caught, it’s only their own data, right? If not caught, then time to abuse the system.