Security consideration: bad RP

[rlin1]

Could a bad RP find out whether a user has a digital address yes/no?

[ADIAssociation]

If anyone has access to a user's PII that is currently used to create a HIDA, then that entity could discover that a HIDA has been created for that set of PII.