There is no law that you have to send any user agent at all, or indeed a valid one that matches your device/browser. It is just a hint for the server.

Edit: and IMO, it's toxic to the hacker spirit to be too quick in condemning ideas as illegal or immoral