> Rather than give special protections to a certain class of people, why not define the crimes to not encompass normal investigative behaviors typical in the industry.

This would be an acceptable alternative, and may even be workable.

> failing to report in an acceptable manner (when, what, where, how?) might end > up sealing the fate of an otherwise innocent tech-adept person poking around.

You've hit exactly the problem, I feel like you too might be working in this area. Not many people come to this kind of logical conclusion.