

Unless you’re Canadian, then you can just raw dawg pirate whatever with no repercussion. IP cannot be associated to an identity here. At worst you get cease and desists notices emailed to you by your ISP but you can ignore them, ISPs are obligated to forward these. Especially notices from companies outside of Canada.
It all depends on where you live, in Poland they don’t care unless you’re pirating polish productions. Then the fist of God crushes you. Allegedly
I have a buddy working security in IBM. He says the same thing. It’s not about security but rather how much money is gained/lost from being secure enough. Even when shit hits the fan, the fees imposed on them are less than the cost to pay employees to implement a solution to stop it from ever happening. So they don’t get tasked to prevent it. Just deal with it when it happens.