Comment by fkkffdddd

Paragraph 202a of the criminal code:

https://www.gesetze-im-internet.de/stgb/__202a.html

Roughly:

„Gaining access to data that is protected with special methods against unauthorised access, either for personal use or for others“

So apparently, hardcoded passwords baked into the client do qualify for that.