Yeah they likely rarely if ever "look into" it and certainly nobody has ever needed a lawyer over this.

As recently as a year or so ago, at least, you could list repo stargazers through their graphQL API and get a TON of email off that depending on the user settings.