There is a penalty. That was way over the line and Roadrunner will now be posting from the mod queue.
I'm not defending him but you can't really accuse him of hacking your photobucket account. Your account is publicly available. You have it set up so the whole world can see it. If that isn't your intention you should probably review your photobucket privacy settings...
Yes, I had no problem with the whole world SEEING the pictures in my account (as they really didn't identify us there). The problem is he POSTED them in some sort of weird stalker way on a website where people know ME, but perhaps do not know what I look like..
I changed my account settings last night. Are you saying it's still visible today? If so, I did it wrong and I'd appreciate advice on how to secure it correctly.