Seems like the equivalent of p-hacking to me. Sure they could apply complex queries to narrow down the suspects in a fair way, but I don't trust them to do that.