> The person who sets up that robot is the person responsible and effectively signing the contract by those actions.

If that was true, then all scraping of a website with a ToS would be illegal, yet it's established by jurisprudence that it's not. And “authentication” doesn't change the picture here in Amy way, because it's not actually authentication.