That seems like a quite likely explanation. It doesn't seem like actual definitive evidence would be that hard to find (if the relevant people were actually interested in finding it).

Does it really matter if you have exposed one cheater who over-used the system when the system still has unknown and unfixed flaws that could be enabling other, more circumspect cheaters?