There was a somewhat recent supreme court ruling that said just breaking some ToS is not a CFAA violation. Unless the gpt4free repo had straight up stolen credentials the CFAA shouldn't apply.