It has to come from an account a) Bezos trusts enough to read and open attachments from, b) an account Saudi intel has access to, and c) an account that's not gonna go "hey ignore that, I got hacked".

That’s likely to be a small set.