Maybe the legality is clearer if they are self hostable? Then all the liability is on the user who downloaded the movies in the first place

I think this is the way to think about it. Mine was a desktop application with no central server.