This has recently been challenged in courts and rejected: https://www.eff.org/deeplinks/2024/08/federal-appeals-court-...

> Integral to the Court’s decision was the conclusion that Section 1201’s ban on circumvention of access restrictions is a regulation of “conduct” rather than “speech.”