This doesn't apply because their cloud service, which has the "technological measure" is not the "covered work", as incompetent as the measure might be...

That's copyright circumvention not CFAA authorization circumvention