I know why they won’t tell you how many people accessed other people’s accounts: they don’t know. Do you really think they’re putting any audit logging in the caching layer? Nobody does that. Why on Earth would you?