It's harder, perhaps, but not impossible, and would certainly still hold up in court. When tracking a user behind CGNAT you need to capture not just their source IP, but also their source port. If you have timestamp, source IP and source port, that's enough for the ISP to resolve it back to the subscriber.