I assume that if this is a bad actor, then account email/name will be leaked?