Don't guess.
Verify.
Evidence has a source and a date. No evidence means “we don't know”, never “safe”.
The response is the same for an address that has an account and for one that does not. At most three requests per hour for one address.
nobody can use this form to find out who has an account with us