What you write is correct, but it wouldnt make any difference in this case. The information would have been leaked anyway.

It will take a whole new approach to confidential information to really make a difference. I think we need to go the SSI way, and I think at some point we will.