Defcon is a useful resource for networking and learning. It being run by and for good guys doesn’t mean bad guys don’t find the event useful. The vague risk of “getting caught” is probably worth taking, regardless of whether that risk is tangible, especially if they follow proper security practices.