Doesn't logging into an email account with stolen credentials, even a "QA team account" cross a line? I understand that spyware makers are not good people, but

Doesn't logging into an email account with stolen credentials, even a "QA team account" cross a line? I understand that spyware makers are not good people, but that doesn't obviate the laws against this sort of thing.