The risk-reward balance is totally reverted. Profiteering from privacy breaches - big reward, fixed risk (the fines are basically capped). Using risky code - small reward (some worker time), big risk (suddenly everyone and their dog can sue you for bullshit copyright claims).