Comment by jcims

I would say the 'first view' you've described is what the bulk of professionals in the information security industry would still espouse as the ideal.

In my opinion this second view you are observing is carried by a vocal minority of participants in bug bounty programs and would be good fodder for a computer-ethics course.