Sounds logical until you realized if they can compromise Op sec to publish the address, the least they can do is sign it , otherwise it is meaningless. Well, maybe they can fool some normies 😁