Exactly, its damage control. If they wanted to reveal more information about requests for user data, they could leak it anonymously.