@Wild, wild west
I'd go easy on that vigilante stuff. Consider:
Law enforcement, militaries and other kinds of public protection evolved from the primitive days where one protected oneself with rocks and sticks and swords, or didn't and died instead. As communities and societies formed, it was natural to designate some individuals who were the best qualified for the purpose to take care of defending the whole, to train and equip them as best possible and depend on them thereafter*. What's happened since then is simply more formalizing and technical advancement of the same general idea.
Then, as now, most aggressors were physical entities who were individual criminals, crime syndicates or aggressor nations (sometimes networks of allied ones) tied to a geographical area. To simplify a bit, defense could be achieved by apprehending the criminals and opposing aggressor nations with one's own military defenses.
This model that evolved from those primitive societies is only marginally effective on the Internet with its global nature and potential anonymity, often with no obvious physical entity to hunt down and fight, plus the problem of when effective defenses induce collateral damage, inflicting harm on harmless others not involved in the crimes. Problems unprecedented in human defense, such as, for one example, the question of what role registrars should have in yanking rogue domains whose offenses are unrelated to their domain registrations, rise up all the time and the answers are not often obvious or without controversy.
This means we're starting at square one again. In cyberspace we are back to the sticks and clubs and rocks again, and need to evolve a protective model that works differently. And just as those early armies and police had very little regulation beyond their own self-determination, today's seem like vigilantes. The difference is, the vigilance committees of old, at least the more lawless ones, acted in their own interests, and often even when proper law enforcement already existed. (Many were very honorable and careful in their efforts.) We don' t have the kind of enforcement system that can work and at the same time not hobble the system it is trying to protect, so we are inventing new ones which work independently. Hence the usually inappropriate tag "vigilante."
( *It is understood, of course, that those bodies soon engaged in aggression unrelated to protection; that's another matter.)