Yep, already had one other team member upvote it, will continue to pass it around.
BTW, any update on this issue or other way to address/mitigate the risk?
Can't imagine anyone charged with assessing risk would actually care about this.
Anyone can forge Google Analytics hits, Munchkin hits, Looker hits, whatever without visiting your pages (and without actually cribbing your HTML). That's the nature of web analytics.