This does not seem legal. Stealing an access token to bypass access controls is illegal and I suspect these people didn't get permission to just scrape anything they want.
Either way, you'd surely agree its a noble pursuit? Just considering the wider context here!