The precedent on this matter is surprisingly thin on the ground, but the legal system has declined to agree with "their store, their rules" for web sites, with a particularly interesting precedent on that matter from "Sandvig v. Barr, 451 F. Supp. 3d 1 (D.D.C. 2020)" where the District of Columbia in 2020 said "Criminalizing terms-of-service violations risks turning each website into its own criminal jurisdiction and each webmaster into his own legislature. Such an arrangement, wherein each website's terms of service “is a law unto itself,” would raise serious problems. This concern, then, supports a narrow interpretation of the CFAA." https://opencasebook.org/casebooks/1797-tlc-casebook/resourc... (paragraph 66)

But all we have is that and a couple of rulings from the Ninth Circuit, one of which is the HN link. For something this critical I'm surprised. I remember writing about this in 2001 or so and you'd think for something so consequential we'd have more lawsuits to point at by now. One wonders how many companies have considered it, looked at the thin precedents we have, and realized that while the victory would be slightly advantageous writing a loss into precedent would be completely devestating and declined to roll the dice.