Yes, already done. Also found the e-mail of their legal/compliance team and e-mailed them.

Wanted to let this group know because this sort of thing is an appropriately sensitive topic in this community, which is also directly their target audience. The AI agent did not identify itself as an AI agent until I asked, which likely violates other laws as well.