Actually I think it means what it says.

> Not that the user cannot try to use it in a way it was never intended to

No-one said it did. User can try anything he likes. That's beside the point.

> If, on the other hand, Anthropic deliberately blocks the user from doing something, then it is sabotage.

Well, consider CSAM generation. Anthropic is free to block whatever it likes.