>I think there is well established law around not running a program on your computer that hacks into systems.

There is? The closest is CFAA's

>knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer;

but clearly that's not what applicable here.