

German here: just creating and selling something is one thing that jumps to my mind.
The concept of “I have an idea and a bit of money so I’ll just found a company” is … Tiresome. Possible, yes, but the legal hurdles both good and bad are ridiculous. You need way more time than in the US just for the formal overhead and even then you are way more in it with your own private existence.
As founder “beschränkte Haftung” is not as limited as it sounds at first if you’re not firm in legalese for example.
It’s a question of effort. Sony has a shitload of public presence. For social engineering I can learn many mid level manager names from LinkedIn for example and their infrastructure is necessarily public facing to allow people to work there.
And that’s not talking about their public web presence and services.
And now we’ll switch to … You! If I’d try to target you I would have to first find anything from you to actually target.
Once I have your phone number, public IP or anything that gives me a lead I have to find my way in. And that way in will be because you’ve made a mistake, are lax with your passwords or use an out of date service.
But that’s like 2/3 of the work I had for Sony as well. And now I see that you’re a student with a net fortune of 50$ and a car from 1989.
To out it another way: for companies I aim with s rifle as they are a worthy prey. For individual people I use a shotgun and hope something hits something.