@aledmorris it's the gateway operator who is at risk, it's unlikely anyone is going to buy a business connection dedicated to running a gateway and nothing else, so the gateway is always likely to sit on a 'normal' ISP connection and liable to the ISP T&Cs.
Even if you log the packets and get the DEVID, it's useless if you don't know who owns that DEVID.