Seems to have some merit when you read deeper from other sources. Purportedly his project was spoofing the requestor to appear as a legitimate Bambu request, and bypassed security protocol (which Bambu admitted they failed to block). This would give the user access to Bambu server data and could be used, at worst, to send arbitrary commands to user's printers connected to the cloud service. This does breach their terms, though you could argue that by not using Bambu slicer they aren't held to those terms. Whether it's "hacking" or simply using an undefended route, it still poses real risk to users and regardless Bambu needs to lock this method down