They don’t include the keys. Their argument is stretched really thin. They’re saying that because it can use prod.keys that are obtained illegally then the program is legal. They phrase this implying that getting these keys is always illegal, which it’s not.