It means that there are societal rules and customs that exist outside of the law. Imagine if Google were to send all people who reported security vulnerability in their services to jail for committing a felony under the CFAA. There are more ways to handle online actions that just sending it through the legal system for the other person to be punished.