> It's impossible to disprove, but I don't think it's likely

If something is impossible to disprove, we must assume it is happening from a threat modeling perspective.