Hypothetical scenario: User outside the United States uses a VPN to access US Netflix content. In doing so, have circumvented Netflix access control mechanism and are accessing the Netflix's computer systems in an unauthorized manner. Unauthorized access to computer systems is a violation of the CFAA. Accordingly, the foreign user is potentially liable for felony criminal charges in the US, just the same as they had "hacked" any other computer system in the US.