A software developer created a program that allowed unauthorized access to a bank's network to expose vulnerabilities. The developer released this program without permission claiming it was for "ethical hacking." Under the IT Act, which statements are correct? Statement 1: The developer can claim exemption under Section 66 because the intent was to expose vulnerabilities. Statement 2: Unauthorized access remains an offence under Section 66 regardless of the stated purpose. Statement 3: The developer can be prosecuted under Section 66 for unauthorized access. Statement 4: Section 66 provides a defense if the access was for security testing purposes. Which statements are correct?