I suspect they have ways to ID at least some things like this somehow in ways that will lead to key revocation.