I say tit for tat. They're intentionally trying to harm me, spying on me, maybe infecting my computer, mining crypto with my CPU, or wasting my network bandwidth. They could just not do that and there wouldn't be any concern about reciprocity
Does your say have any relevance here in terms of what the law is? Are you a state judge tasked with interpreting the law? Where's the tit-for-tat clause?