So the plan is: acknowledge the query, state that I can't assist with pirated versions, explain the risks, and offer help if they obtain the software legally. That should cover it without violating any policies and also provide the necessary assistance if they're in a legitimate situation.