Which also makes any cybersec company operating in Germany also illegal.
Although, no one has been prosecuted for this, it makes getting insurance impossible…
https://iclg.com/practice-areas/cybersecurity-laws-and-regul...
Mapping a network is not an activity exclusive to criminals.
Though, this particular interpretation does make Google Chrome illegal; it has dev tools that can be used for manually sending HTTPS POST requests with forged headers. (It also has XMLHttpRequest, which can be instructed to do what nmap does with relative ease.)
But the part about hacker-tools applys only for tools that cannot be used legally (basically none) or are explicitly and knowingly made or acquired to be used illegally (as in you explicitly stated you are downloading this tool in order to get into a computer you do not have permission to get into). They have to prove you are not intending to use it legally (like checking your own network or one you were hired to check).