The division between state-sanctioned invasion of individual privacy (in this case) and draconian sanctions on trivial "penetration" actions (like changing the

The division between state-sanctioned invasion of individual privacy (in this case) and draconian sanctions on trivial "penetration" actions (like changing the UUID in a URL) for corporate entities using the CFAA is really contradictory. We need to turn it around: draconian punishments for "law enforcement" members who violate the constitution, and protections for individuals who tinker, probe, or explore without malicious actions/intent.