It’s also an anonymous source to a student newspaper. I wouldn’t exactly hold them to the highest editorial standard. They just they confirmed they saw emails which anyone could have sent. Did they look at the message headers or request IPs from the provider.