

Android I think just uses same credentials you use to unlock account, at least I am not aware of any recovery key. And you are prompted for credentials from time to time so it is harder to forget. I use fingerprint as main unlock + pattern and I have to enter pattern roughly once a week I think.
On Windows if you set up Windows Hello (fingerprint or PIN usually), you are not reminded to enter password afterwards so eventually you can forget it. And if you do not know your password and cannot recover account, you will not be able to retrieve BitLocker recovery key. So fix to this problem could be another annoyance to users if it would be implemented as Android does it.
Depends where you live and how enforced anti piracy laws are. I have downloaded stuff for 15 or so years through 3 or 4 different ISPs from static IP and have never had any issues.
Only thing that you could somehow call a protection is I do not use ISP owned DNS server.