The former is true, however anyone who’s ever looked at firewall logs will tell you plenty of skids are trying to get free domestic US IP addresses off of vulnerable home networks using automated means.

That being said that has really has jack shit to do with personal privacy/security against state-scale dragnet surveillance.