CDPR's policy and the law are orthogonal things. They would have to demonstrate that the mod and its business model violates some kind of law.