Serious question: how do we know for certain that their DB hasn't been stolen yet?