Yeah good point, they need to at least be making requests containing the public addresses. I'd guess not with any identifiable information beyond IP address, an

Yeah good point, they need to at least be making requests containing the public addresses. I'd guess not with any identifiable information beyond IP address, and not sure if the law would force them to store the specific requests associated with an IP address..seems crazy but possible. Certainly these endpoint have no authentication / user accounts though, and I don't think it'd be easy for some low level hacker to associate an IP address with a specific person.