> Find a vulnerability for the government, get prosecuted.

In fairness the government is, of course, not a monolith. There are multiple federal bug bounty programs out there [0] [1]. This is probably better stated as "find a vulnerability in the systems of a deeply corrupt, gerrymandered, and unpopular state's government's sites and be prosecuted in that state."

[0] https://www.hackerone.com/hack-the-pentagon

[1] https://www.dhs.gov/news/2021/12/14/dhs-announces-hack-dhs-b...