I think you may be have looked at it before private routing was implemented. There's only a potential for discerning a specific profile if they're using a private SMP server, and not an array of public servers. Every connection involves a randomly selected server pair selected from the collection of servers each person has defined. With private routing, there's additional proxying and mixing, as well as session-level masking.