I originally looked at this for web scraping, but upon reading it more, it seems like it could be interpreted to include all types of common mistakes.
Does this even include something like a customer who entered his/her personal credentials issued by representatives of the service just for him into the wrong URL on the website as an attempt to "intentionally access without authorization/exceed" even though he thought that was the correct URL, like with different pages of demo and live accounts?
Can someone claim that the user intentionally tried to login regardless of good faith thinking it was the right place + right auth vs user clicks on a random button that lied and actually tried to log him in without authorization instead? Does the law anywhere says something like common day activities like this don't count? This law just seems really vague/broad in that it include a lot of reasonable mistakes.