No, you're correct in that assumption.

In case of a complete server breach, that would indeed allow for de-anonymization of posts.