"And then an uncomfortable thought: what if someone was reading all of this?"

If you really are a security researcher then that's not true. You already know all this.