The smart ones are keeping it on the down-low and to themselves. The dumb ones steal it from an Amazon warehouse, stream the game on PSN, dox themselves, then try to sell the game online with their location and name listed.
Word on /vg/ was that CDPR passed cert. provisionally (i.e. the day 1 patch fixes the outstanding issues). Sony found a bug that was causing specific models to brick completely. They didn't specify whether this was with the day 1 patch or pre-patch. Turns out it was the pre-patch version that caused the issue and the day 1 patch fixed it. So they delayed it due to miscommunication.