Most plausible outcome I've heard is that the Feds will only pursue high-volume users, either vendors, or buyers who intended to distribute. Buyers for personal use wouldn't be worth the trouble, though I think they could just distribute that info to local LE.