It arguably depends on whether it is a hard or soft rug pull. A hard rug pull starts from the code where the developers place backdoors that clearly demonstrate the intent to commit fraud. A soft pull entails slowly dumping assets over time, devaluing the token. While unethical, proving the illegality of soft rug pulls is a challenge.