[pbhjpbhj]

>There is no authentication, but does that mean you are authorized? //

Not being "not authorised" is not the same as being authorised. Authorisation is a positive action.

[rocqua]

Not every action requires authorization though.

[pbhjpbhj]

For sure, it's been a while but IIRC the CFAA (and UK's CMA) refer to use of certain legal classes of computer "without authorization" or "exceeding authorization". Legal authorisation is an active state rather than something that happens passively.