They definitely can and they do, the only question is whether they will get caught or not. Folks at Volkswagen, Enron, Theranos, etc. probably thought they would never get caught.
They can not do it, and have it mean nothing legally, by their discretion, just because it's not part of their ToS, is my statement in spirit. Violation of ToS is not a requirement for violating the law.