Depends on where the person resides as well, and one doesn't have to be sued with theft specifically. I've seen a case here where someone ran a server using bandwidth, without paying for it, without the owners of the network knowing this. Once they figured it out they sued him for theft -- unsuccesfully. Because one cannot steal 'bandwidth'. Try the same with electricity (as happens with folks who grow their own cannabis in their basement using 'tapped' electricity) and you are hosed.

So while what you say might be true in US if we see it as questionable to help someone who states their specific goal with the tool then we're in our right to refuse to help that person and warn others to not do this. I've also already told him a way around it to solve the issue.

Ofcourse there are cases where murder or robbing a bank is justified. But we cannot assume it is justified when someone asks us for help concerning that...