There was a story a couple of days/weeks ago on here (sorry I can't find the link) where someone had been phishing their way into iCloud accounts and downloading all the photos from them. Despite making absolutely 0 effort to cover their tracks (not even a VPN),this went on for a very long time before they were caught.

Just because the knowledge is there and there's a paper trail doesn't mean anyone will _actually_ put the pieces together