I’m sure the lawyers could figure out how to argue that the MITM attack this person did is some kind of illegal identity fraud.