Yeah, this is the wrong response code, but I guess there isn't one for "we want to harm you, but since this is illegal, we prefer to deny you service". Looks like a severe overlook from the IETF.