> A bit like international waters.

Which is a good analogy; international waters are far from lawless.

You're still subject to the law of your flag state, just as if you were on their territory. In addition to that, you're subject to everyone's jurisdiction if you commit certain crimes - including piracy. https://en.wikipedia.org/wiki/Universal_jurisdiction