This is probably the best answer. If everything is truly only running on local network and nothing is exposed with a port through your router, you are very safe.
Most issues get introduced when running a server exposed to the Internet.
That said, on the lowest level, if they want to get you, they will. It’s all a risk analysis. And the more interesting you are to adversarial parties, the higher the chances you’ll get pursued.
If you’re Edward Snowden, 99% your calls and conversations are always on record.
If you’re John Doe, truly only your ISP cares when they get a law enforcement request because you really pushed the envelope.
Trending movies are notoriously bad, because movie studios will really try to rake in the revenue.
On the other hand, ripping music from YouTube, no one cares or is able to track it, so risk is very low.
NGL giving them lots of grace, I can still see this being one employee lifting things and getting away with it. Ofc this is extending a whole olive tree to Bungie, but it’s still possible.
That said, there is a pattern suggesting at least someone has done this intentionally and managed to not get fired for it for quite a while and that’s very poor management. If it happened once, I could even see a stern talk, but if they’re not fired the second time they do it, that’s on management and on the whole company.
I’m, so sorry for the other artists and devs working on this game who basically get all of their work undermined by party fouls from someone else.