[eqvinox]

> This is much the same argument as "you shouldn't have let me hit you" and carries about the same moral weight with me.

I'd rather compare it to not locking your bicycle and then complaining someone stole it. It may be illegal but you're a bit naive for expecting otherwise.

Also, in this instance the users were able to notice the data collection. What about the instances where they aren't, because the scraper just keeps to themselves? And then maybe they start getting very well-targeted spam or phishing, and maybe never find out how they were able to do that?

In a way, this scraper is a service to awareness.