1. "it's fine, we only collect data on foreigners" 2. "oh ok we may accidentally collect data on americans but it's only used for national security purposes" 3. "yeah we started letting the FBI use our database for routine shit now, but you know, it's for your own safety"
meanwhile it's all orchestrated by some behind-closed-doors secret kangaroo court with zero accountability and america just carries on in wilful obliviousness
And lol it doesn't matter how many people visit the store. People can still find out who you are. There's trained professionals out there who specialize in that kind of thing.
Copyright infringement is a different thing. That would depend on him getting caught distributing the stolen games which just isn't going to happen unless you running an actual pirating operation. On the small scale no one is going to notice.