Since it was the owner's account that got compromised, whoever had the account would have been able to destroy any part of the server. It was safer to just whitelist the whole place until staff can fix it.