It says that the users "cannot be identified" which is a much stronger statement than you are giving them credit for.