It can't be legal that they randomly charge extra usage with no user consent.

US govt decided to stop applying laws to AI companies

Probably "consent" by use of the product, as described in the Terms and Conditions.

What kind of law would cover this?

Are laws being enforced presently? I hadn’t noticed?