I agree. When scraping my school's portal which uses Canvas, my school actually allows it.

Sometimes you can get the green light just by reading API docs/School's privacy policy as they're usually obliged to have one (ofc this primarily applies to school APIs like in OP's article)