Will there be any charges?
US prosecutors seem so keen on charging teenagers (remember Aaron Swartz) under the pretext of "unauthorized access to computer network". Well, this:
". . . and communicates them to our servers through a secure, undetectable channel"
... seem very much to be the definition of unauthorized access.
Not holding my breath, though.