Even back then using IP address only wasn’t how we profiled. If the poster meant literally basing this on IP only, then yeah, I sort of agree.

But a false positive here just means someone can access the video who isn’t supposed to access it. Without the system in place anyone can access it.