That's a good point... I based my assumption on the fact that they require a private key for receiving, but not sending.

I guess that doesn't necessarily prove anything...