A newspaper finds a security flaw in a state website. Is that hacking?

Have you had any trouble getting your prescriptions filled?

Which is better?

Are you worried about breakthrough cases?

Should the state investigate a reporter who exposed a flaw on a government website?