Should we get a lawyer's advice on this? What steps does the site need to take to avoid heat?
No, and nothing. Nobody is hosting copyrighted content here, ergo no piracy is happening here. We're not a big social media site trying to do an IPO, so we don't even need to worry about bad optics for investors. There's nothing at all worth being concerned about on this subject - it's a complete non-issue.