Not very wise to export your (assumed) copyright-infringing activity over to a third party that has complete records of who you are. Folks have been sued for less.
They're an old company (probably more than a decade old), and I'm using them since they started. I didn't download much and honestly used them for distribution .ISO files 99% of the time.
However, they're still operating, they only know my e-mail, nothing else, and they honor DMCA take down notices.
If a company takes legal action against you or other users, they will subpoena the card processor, too; the fact that the first company doesn't hold your personal details is irrelevant.
Plenty of individuals have had significant penalty for torrenting, including settlements [1] (search for singapore), and being blocked from accessing the internet [2]. The RIAA also sued a large number of individuals in the US [3]. And that's apart from the large number of companies that have been sued for supporting torrents.
So, yes, people easily could be sued for torrenting and plenty of people have suffered significant penalty.
However, they're still operating, they only know my e-mail, nothing else, and they honor DMCA take down notices.
Oh, and the company is local to me.