I can’t speak for the standard situation but for BG3 it isn’t “cracked” it ist does not contain DRM. AFAIK this is true for BG3 across all sources for purchasing. You should be fine to play with him.
This would have been new information 5 years ago.
Requires small businesses, as defined by the United States Small Business Administration, to receive consent from consumers before selling consumers’ sensitive data;*
Why carve out exceptions…
Context?