None of the third-party websites using these applications and features of Second Life sign the TOS. That is, they sign the TOS if they are avatars entering Second Life, but SL then becomes like a "dry county" to them and their "wet country" is the third-party website they use outside the world.

On their third-party sites they can do all kinds of things they couldn't do under the SL TOS. They can libel and slander, verbally haraass, publish private conversations, out RL details or publish false information, etc. They can also harvest IPs, avatar keys, and other kinds of information from the world and then track people's purchasing patterns, their associations, where they travel in world, their expenditures, their residential and store locations -- it's a vast storehouse of information available for the culling with no accountability, oversight, or transparency about its usages to gain advantages over people in Second Life.

I really think a lot more thinking has to be done about what I call Priminent Domain -- highly-technical game dev partners of SL, often long-time players and early adapters -- laying prims (objects) all over the world to do grid-wide projects that have powerful impacts on the citizens of the virtual world.