Ok, people clearly aren't reading the first few words (nor the last line) of my post:

"I don't understand..."

"Can someone explain this to me? "

I think the problem is that you do understand and have explained it perfectly, but some people can’t handle the truth. These threads have brought out some ludicrous opinions (as anything Apple centric tends to on HN).

Well, I actually don’t think I do.

For instance, wouldn’t this have to be reported as an unauthorized intrusion (getting access to a user’s messages without using their ID) ?

Also, nothing I’ve read has any criminal aspect to it (ignoring DMCA stuff).

Given all the issues with SMS security and spoofing, you’d think this would be an issue, but nobody has brought it up.

Seems unlikely that given all the coverage that I’d be the first and only person to notice that, which is why I don’t think I truly understand it.

It certainly seems like it would have to be a violation of the Computer Fraud and Abuse Act.

If you recall, Aaron Swartz was hounded to death using that law after accessing JSTOR's servers without permission.

https://en.wikipedia.org/wiki/United_States_v._Swartz

Never forget.