Just because in "real hacking" you can just smash somebody's head with crowbar untill he gives you the password?

That's fair, but just take a look at how complex latest biggest hacks are like

https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-i...

Yes, or more that any workaround for a system is valid, rather than narrowly defined by specific rules.