There a significant difference between "the user can be identified fairly well if you can get access to sensitive stuff" and "the owner is always explicitly recorded in a searchable database".