I don’t think any jury in the world would call clicking on links literally hacking. When I read poking around, that is what I think of. And their point is that if you click on a link that takes you to a secure area because of bad security, it is defined as hacking by the law in some jurisdictions. This is because those laws don't describe the action, they simply say "accessing" certain data. Which is lame.

So a chess player that exploits an opponent’s weakness is hacking?
A snake that finds an entrance to a gopher burrow is hacking?

“Finding vulnerabilities” is the kind of dangerously overbroad generalization that gave us the DMCA.