Even if those data points don't leak when reviews are left they could still do fingerprinting attacks and automatically flag mail to boxes that get mail to them that fits a profile consistent with drug trafficking...for example if an address frequently gets mail from multiple drug source states. There are probably very accurate algorithms that can take mail routing databases and use them to automatically come to a probability that the box is involved with drug trafficking. Best way around this is using multiple fake ID boxes.