Hmm, maybe I mean moral?
Like, there is a correct way to go about something regardless of context.
As opposed to doing something because of the context.

Any exploit should be notified to the software/platform maintainers with a proper disclosure timeline to ensure it gets fixed in a timely way.
That is the correct way.

Abusing the shit out of a poorly implemented nazi government is the moral thing to do, but would go against a white hat's ethics. Collectively a good thing to do, but not the correct thing to do as a white hat.

Are gray hats more ethically and morally true?
This is getting to deep for me.