This kind of coercive, threatening rhetoric is really not surprising at all. This is how tech companies operate.
What stands out to me is the naive lack of operational security on the part of academics, who should know better than to touch this SaaS crap with a ten foot pole.