From the AGPL:

>When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures.

This doesn't apply because their cloud service, which has the "technological measure" is not the "covered work", as incompetent as the measure might be...

That's copyright circumvention not CFAA authorization circumvention