Legal consequences, which are backed by the state's apparatus of violence comprising of police, judges and prisons, should only be used against those who engage in fraud or violence. Running a closed API, as much as I may dislike it, is neither of those things.

There are plenty of other ways to counter closed APIs that do not rely on initiating force.