> catching the low-hanging fruit would at least probably handle any potential legal liability?

Actually No. It take 5 minutes to create a script to randomize a password, encrypt and upload.

Abusers have been doing the same for 20+ years and it is very effective.