I assume you mean more likely arrested? Since legal liability would be the same.

Logs of identity vs. access history being useful for investigating sharing? What kind of logs does California State keep?