It's more like your work giving you written permission for a free 1RU of space and 2 amps of power and a DIA feed described for a personal test/development/project server, and you turning around and starting a paid hosting service on it
Except some were unlisted. Then it's like installing 2RU when they only wanted you to install 1RU.
Then you increased their fuel/energy/etc costs and increased the lives of others as there are now unvetted things in space/your rack.
I doubt that they didn't weigh the personal effects pouch accurate to within 1 gram beforehand, so whatever they brought, it was within the specified weight allowance.
In this case yes, but what if it did matter? What if something happened and they became loose or had a chemical that set off some sensor? There is probably more than just weight checks. Safety of ship, crew safety, imagery they wouldn't want on any footage or photographs, etc.
Some were declared; why weren't these? It is suspicious behavior. What else could have been brought on? What failures of process and policy allowed this to happen?
It's more like your work giving you written permission for a free 1RU of space and 2 amps of power and a DIA feed described for a personal test/development/project server, you installing a personally owned 1RU server in it and doing something useful with it, and then your work trying to claim the revenue from it.