Yes of course they should. Its like the guys who break into a big system and say "Look what I can do - fix this, but don't hurt me I'm trying to help!" What they did was:
1) Illegal
2) Helpful
Yes it was helpful in hindsight but that fact has nothing whatsoever to do with the first fact. So, they should be prosecuted as any criminal would be. In regards to helping out they should get awarded appropriately, but the helping out does not cancel out - just as a hacker who "points out security errors" is rightfully prosecuted. ANY system can be broken, their only helpful point was indicating how easy it is to do so, they still broke the law.