You are right, but technically speaking it would be a crime anyway. It is not that if you leave your door open then entering without permissione is not a crime.

Leaving the door open and people walking in isn’t a crime, unless explicitly mentioned otherwise (may vary on jurisdiction), but faking a login is a lot less denyable than using the same User-Agent as some software (famously a bad marker for authentication).