The creator of the Cyberpunk 2077 VR mod CD Projekt recently hit with a DMCA strike has paused his Patreon page and pulled access to all his mods after receiving another strike from a different publisher.
Looks like the Ghostrunner developers also have an issue with paid mods running off their IP.
So your answer to why paid mods can’t exist is because CDPR made it so.
Threaten what exactly? They don’t ‘threaten’ jack if CDPR say they’re okay with mods. You use circular logic in your argument.