@kaia rutracker.org — it's not as good as some specialised music torrent sites might be, but still good — mostly because it's Russian and I think they just ignore takedown notes. And it's open — the built-in search might not work without an account, but you can always search for "site:rutracker.org whatever-you-want" on DuckDuckGo. Also, it doesn't always allow you to download .torrent files without logging it, but Magnet links always remain public and most Bittorrent software supports them.
@kaia also there are tools that download lossless music from deezer's CDN which will give you most stuff currently for sale (at least from major labels)
@kaia (if you haven't heard of it: soulseek is a semi-centralized p2p file sharing program that lets people publicly share their music libraries and make them globally searchable. you don't have to make your own stuff public to use it, not really sure what the etiquette is on leeching but tbh the only time i pirate music is a few tracks at a time for research)
@kaia from searching reddit it seems like there isn't really a consensus between whether it doesn't matter at all, if you should always make your whole library public, or if you should at least make the stuff you got from soulseek public
@raccoon@kaia thirding soulseek as something to stay away from, but as for torrents, 1337x.com, thepiratebay.rocks, and nyaa.si are all dangerously full of spyware so watch out