My problem is this line: "As a professional penetration tester, Homakov knows better than most people that hackers should never access someone else's computer network or account without explicit permission."

He did neither of this. He used forms that Starbucks had in place (which they expect customers to use).