As a former library developer, I've written all sorts of little bits like that for all sorts of archives and databases and publicly supported open access. If that's really all they've got, it's pretty light. I imagine they've at least got some sort of access logs, surreptitiously viewed conversations about it, or something similar.