Certain financial institutions in some regions mandate telephone-network based 2FA for their customers accounts, and in the event of an account compromise attempt to pin the onus of liability on the customer. Maddening they wont give customers better options if they want to secure themselves.
This is a positive ruling, but it seems to be a little ridiculous to be applying anti-circumvention claims to something as trivial as a website password.
What I am more interested in is if a similar precedent would apply to fair-use of legitimately obtained content or hardware (e.g backing up a Blu-Ray disc, obtaining and installing a mod-chip in a video-game console to utilize third-party applications, etc.)