> They reverse engineer a protocol, built an app for it, bought a domain with a single character (s -> z) difference (cyber-squatting) and are charging for it.
Perhaps, but no one is talking about criminal charges. Torts, like the trademark violation here, are still illegal and a basis for legal consequences, you just don’t get prison, death, or other uniquely-criminal penalties for them.
None of these things are crimes.