They could even transfer usual "miss u"-alike stuff over SMS, and encode actual message in the time delays.
Would you know who wrote it if I didn't link to it?
Also, pastes are not done via ssl connections, so anybody between you and pastie knows what's in that paste, and what IP created it.
Depending on how you send that link, that messaging provider knows (for example sending it via Skype, Microsoft knows).
And thence does anybody with the legal capability of subponeaing data from any of those services.
If the sender can edit a previous paste, they can agree on a URL, but I didn't see how to do that.