Another reason why all vendors need to post their PGP key. Im sure SR backs up their database once in while and if they had to, thy could go back to the date that you opened the account and look at it. If your PGP key was there, then you would have a lot of evidence on your side.