So would simply not providing your name whenever it is optional would have solved the third party attacker issue just fine. State level action is still a different story, however.