Yeah, you're right, it's not evidence of abuse. I just find the designed system is vulnerable to it. Whether that's the case would require more data.