They should have had security in place beforehand if they didn't want people to scrape their site. If AA hadn't done it someone else would have. Don't make it public if you don't want people to use it.