Am I missing something or did they only copy the OAuth flow? Yes it's unethical and seemingly illegal, but it's not like this is getting them anywhere close to

Am I missing something or did they only copy the OAuth flow? Yes it's unethical and seemingly illegal, but it's not like this is getting them anywhere close to a working product. None of the content in the article is related to any API that actually does something... It's just authorization.