This shouldn't be just a fine. They exfiltrate a users credentials for another service without explicit consent and intercept a confidential communication chann

This shouldn't be just a fine. They exfiltrate a users credentials for another service without explicit consent and intercept a confidential communication channel between the user and their mail provider. This is straight up criminal behavior and should lead to jail time for the responsible person.