Two points to be made here.
The risk is not some government agency in this case, but rather the hacker. S/He had no problem going after the girl and may not have any trouble going after her clients.
There is a saying: statistics don't matter to the individual. If something happens to you, it...