if you don't think bypassing broker/exchange authentication isn't criminal hacking then great, you should do it. you're an adult, i'm sure you can assess the risks. not going to help you do that at this point though. if you want citations so you can assess the risk for this type of thing, you should find them yourself.
going forward in this thread, with OPs nod, would appreciate if we could keep the discussion to legal alternatives. i have zero interest in participating in this discussion if the theme is how to hack exchange/broker authentication, even if it's hypothetical. thanks.