Before this change, would the company have been liable for harassing DMs on Slack, an unaffiliated service where they previously were not able to read peoples DMs?
Unaffiliated? The company a customer that is paying Slack for a messaging service, that certainly isn't 'unaffiliated'.