This his how I look at it. If a lesser computing device's vulnerabilities were exploited to alter its intended behaviour, especially for financial gain, it would be considered hacking and criminal penalties would apply. Why that applies to a mobile phone, and not to a far more critical computing device (the human brain) is the question.