It isn't saying it is legal, just that it doesn't run afoul of the CFAA and become a federal computer hacking crime. There very well be other laws and repercussions, whether at different levels, like State, or being fired, etc.

It is refreshing because it doesn't put the risk of federal criminal prosecution at the whim of how an employer writes their policies.