Excuse the ignorance, but what do they do when LEO knocks and asks "At 2:34am CST, we saw IP address <x.y.z.w> downloaded child porn. Who was it?" They just sa

Excuse the ignorance, but what do they do when LEO knocks and asks "At 2:34am CST, we saw IP address <x.y.z.w> downloaded child porn. Who was it?" They just say "We don't know"? Aren't there consequences for letting people download illegal content via your servers? It seems likely that they would say "At 2:43am CST, the IP address proxying <x.y.z.w> was <your actual IP>," at which point LEO would knock on your ISP's door. Right? I think it's totally crazy (as in actually-insane) to trust your life to these services. You're right, you can't really be sure. And if you're in a situation where you need to protect your identity, you're already caught.