I agree it’s not provable that what’s running matches what’s in the repo. It’s pretty hard to prove that something isn’t happening, you’re right. You can always use a burner email, or a dedicated email for SN. Good call being skeptical. Practice good opsec everyone