I feel like this is legal i.e. we allow it.

Stanford wouldn't blatantly violate laws like this.

it could be not blatant violation, but they more like don't track this on their side because don't think it is a big deal, so some individual can act like that.

Blatant violation would be if they do it on many cases and large scale.