If I recall correctly, they justify it by claiming they need to do deep packet inspection to balance traffic. There's a fuzzy line between them needing to optimize their network equipment and respecting privacy, and the rulings seem to favor the former.