This is a valuable point: you can absolutely exfiltrate data this way based on timing, and it's fairly automated with tools at this point.