Python bytecode was shipped in a commercial application; I once took half an hour to figure out what arguments the scripts were accepting (by decompiling the bytecode). This has allowed me to generate some license-free objects to be used externally, an option supposed to be only available at additional cost (an add-on my org didn't purchase). I'm still undecided between "that's what you get when you are ignorant enough to ship confidential code as Python bytecode" and "let's be nice and report an issue". In the meanwhile I've been using this for about 2 years now and never told anyone about it.
Fair enough, don't know if this qualifies as a loophole; I setup a SaaS subscription using a student account, then +8 years later and they still bill me using the student pricing (50% discount) and never asked about it.