Their web server can just as easily send a 401 if you haven't logged in with your account after paying for access. They don't have to give you a 200 when you GET /. Nothing is forcing them to give your browser the OK just because your browser requested their site.