The project was accessing Haiers cloud API, not just your appliance. Not that that it makes this any less shitty, but there is a difference. They aren't saying you aren't allowed to access a product you own, they are saying you aren't allowed to access their servers.