It's that, plus it's not being investigated very seriously. I ran a VoIP company, and supposed federal investigators wouldn't even go through the hassle of getting s legal order for customer information.
It's the same for robodialling. The FCC or anyone could put a major crimp if they wanted to, but no one really digs into complaints very much.