That would be stealing credentials, they were arguing they might have obtained them legitimately.

I, too, would argue I obtained them legitimately, by giving Claude access to the filesystem image and asking it questions it could only answer by doing exactly this.