> No-one ever defends themselves by saying "everything I did was enabled by the poorly designed system, therefore I am not a criminal".

This is a pretty common argument, actually, when it comes to questions of "allowed" API access.