I believe that decision was that web scraping doesn't violate the CFAA unless there are access controls (such as the need to log in) to get to it, but they specifically said that the ruling doesn't comment about other possible claims against it.

That's why I think it's still a gray area. But I could be wrong -- I haven't been following this stuff all that closely.