Yes though in theory my public key would have been published elsewhere at least for verification. Valid point though, yes they would have been able to do that.