Oddly enough, the top levels of the piracy chain still use FTP and IRC. Even though security improved right after the early 2000 busts, it has remained relatively unchanged since then (even taking into account the RELOADED-related busts ~8-12 months ago). But I guess it all comes down to scale.. it's easier to control the security of 100 users over the security of millions.