I mean… Just look at the news. We don’t have to imagine it because that is what is going on.

There were some rather in detail answers already to which I could add. But instead I am going with a more simple answer that is hopefully also good.

Basically, bad actors want to stay undetected if possible. Like staying in dark places with dark clothing and not making noise. trying to get your own subdomain is more like wearing a high Vis jacket, having Christmas lights on you and broadcasting your presence with a loudspeaker with something like “catch me if you can!” on repeat.

Or even simpler: getting detected is bad for bad actors, doing that is one great way to get detected, they know that so they don’t do that.

Or metaphorically: a drop of water in the ocean won’t get noticed, rain in the desert will.

At the end of the day it’s not about what you can do but if you should do that.

Yet… Ubisoft did go and “remove” the keys for the crew when they shut that one down. No one but them can really say if they actually deleted them or not. though I have my doubts with how that company has acted in recent years.

There are reasons for why that is possible, for better or worse.

To reverse malicious actions that may have been taken by other people that got access to the account for any reason for example.

There may even be legal reasons for why that is the case. Licensing law can be quite complicated.

And then there is the fact that if it’s hidden it’s effectively gone anyways and that may actually be what people actually care about. Not whether or not they technically still have that game or not. People wanting a clean library is a thing and it ties into the concept that is the right to be forgotten.