"And then an uncomfortable thought: what if someone was reading all of this?"
If you really are a security researcher then that's not true. You already know all this.