I mean that's the problem of any protocol in general. Your opsec can be great, but if it relies on someone else's opsec...