Is it more or less likely to be poisoning the data being sold than doing nothing at all?