What’s hypothetical? All this is and has been publicly accessible.

Have bad actors already found it? Who knows?

So if Fiverr isn’t going to fix it then the next best thing is to warn people.