> This might not actually be spying, but instead just an attempt to plant fake results.

That statement might be (slightly) more believable had there not been access attempts from Russian IP addresses using valid (and recently created) DOGE login credentials so very shortly thereafter.