Could be wrong, but the act of downloading music isn’t what gets people in trouble, it’s the uploading. When people torrent both happen, but afaik it’s only the uploading portion that is actually bad.

Yeah, once that reveal dropped the movie lost me. Didn’t help that the narration stated the kids were never seen again, oh wait yes they were some are even getting better now. Plus the fact no police, or fed, or anybody else in the first couple of weeks didn’t look at the videos of the kids and go, hmmmm they seem to be going straight, so it wasnt until one dad decided to take it upon himself to look at that very clear clue. Was a good premise but it broke down the second the reveal happened, then breaks even more once you actually think about it for more than two seconds. Everything up to the reveal, and especially James’ POV was really great though.

What was disclosed?

The fact the is a vulnerability/exploit to get the true email address exists. Has now been publicly disclosed so people know it exists.

What is the vulnerability?

They aren’t going to disclose that publicly.