By making it login only, every potential user is turned into a sellable asset. And you convince the courts that it's a password restricted website so you "breached" authorization or something