Too Long; Didn't Read
The rule of the internet and its wildness is: there are no rules. Nothing contained in your website code is off-limits. People will find every bug in your system and have at it. It’s always good to build your products and systems and thoroughly test them. It should be known to you now that testing how far you can get into/mess with/break a system is ideal. We should be doing this for all of our networks, servers, products, or have somebody on the team to do so for us. It's a full-time practice, which extends to a lot of positions.