Did those people sign a legally-binding end-user license agreement?

Because what I see is essentially "they're storing stolen property" but the burden of proof is on the author to prove it was, indeed, stolen.

I imagine the bar for that is pretty high otherwise anyone could weaponize DMCA to target their competitors' repositories.