I have no clue whether this violates CFAA, but arguably they usurped address books and intercepted user's communication.

This was obviously intentional, and the timing makes sense -- Apple is rolling out address book synchronization with Facebook.

I hope this forces Apple to reconsider.