This company also seems pretty low risk, unlike, say, a consumer privacy messaging or VPN service. Consumer privacy services have very low revenue per customer

This company also seems pretty low risk, unlike, say, a consumer privacy messaging or VPN service. Consumer privacy services have very low revenue per customer, so if you attract a few customers with huge attached legal costs, you probably just shut down. I think if you're not a dick, you shut down and offer to pay your existing customers to use an equivalent (if available) service elsewhere for some transition period, since you can't continue operating your service directly.