Correct. Especially since it’s centralized, they could have used any secure form of asymmetric encryption to offer the same guarantees