Your mistrust is not unreasonable. However I think if state actors/rightsholders/CF were serious about monitoring user activity covertly they could just simply volunteer to host a mirror/CDN for Anna. And that would also expsoe paying users.