because they’ll hopefully collaborate with law enforcement to track you down.
Unlikely - most of the time they won't have any logs anyway.
People get caught for CP and other crimes due to lapses in their own security usually - reusing user names across sites, details in photos that can be identified, or simply using a non encrypted connection one time.
Exactly - snd yet people still claim their 'VPN ratted them out' - it didn't - it might hve failed, or the user never turned it on, but the VPN provider didn't get a copyright notice from Disney and forward it an ISP.