I would question whether the AT&T case involved "access in excess of authorization". I feel like the merest attempt to implement some access control would be ne

I would question whether the AT&T case involved "access in excess of authorization". I feel like the merest attempt to implement some access control would be necessary for that. I think he was doing enough other things that I'm not crying a river that he got punished, but IMO it sets a bad precedent.