Yep. In 100% of cases that I've heard of where someone got busted because they ordered from SR, it was because the package was intercepted. I agree that people put too much emphasis on the technological aspects, which are theoretical so far. Anonymously purchasing bitcoins, encrypting your address, leaving no forensic traces of Tor on your computer, etc. No one has been identified, investigated, arrested or prosecuted based on that evidence alone. To my knowledge, it has never been the starting point of an investigation. Of course, there's a first time for everything, and LE will get savvy to it eventually, if it is worth their time. The best thing you can do to protect yourself from getting arrested is to order amounts that are small enough not to get you CD'ed.