It's not illegal to run code on a device without informed consent to everything the code does. The CFAA may be excessively broad but it isn't that broad.
ask any of the people who installed it if they understand what they're doing and especially what the consequences of that are. i doubt you could get a dozen people who do of the millions and millions who installed it.