How does a private tracker ensure that it hasn’t been compromised though? From my understanding they largely disallow the use of VPNs, although perhaps that isn’t true of all private trackers. Still, this user for example could be a bad actor and he was just given an invite code without any sort of check being done.