In a morally-flexible environment, it's easy to confuse the two.
For example
- Zynga selling offers (for credits) with very fine print that signs you up for paid services. And the fine print is so convoluted/tiny most people don't read it. Helping or hurting consumers?
- Facebook hiring a PR firm to highlight questionable privacy practices by Google. Helping users or hurting Google?
- Subprime mortgages. Helping or hurting homeowners?
You're assuming your conclusion. Punctiliously following convention doesn't make you good. It just safely ensconces you near the mean. Not a promising place for startup founders to reside.
Calvin from Calvin and Hobbes is naughty. He's not evil or even "morally-flexible".
English isn't a computer program - there are many interpretations possible. I suspect that they didn't even see the other interpretation of their language around security until someone pointed it out to them.
If you followed PG's record, you'd know how strong an advocate he is that startups be good.