Comment by theptip

I am extremely skeptical that many people are making an informed cost/benefit here. I would wager most users don’t even know about the license terms.

It’s the same as infosec in general. Most people don’t know about the risks, and anyway are bad at quantifying tail risk.