Who can clear this bar? Not many hospitals, school districts, cities, or mid-market companies. Those are the most targeted and least resourced orgs out there.
Anthropic’s choices here measure whether a company is big and public. They don’t measure whether the person asking is a real defender. They gatekeep around bug bounties, which many are dropping, public filings, or some public hacker persona. They assume a defender doesn’t need offensive capabilities for testing.
It’s their platform. As written though, the defenders who need this most will move to tools with no guardrails.