but yea to answer your question, hypothetically anyone could do anything. But realistically you gotta look at the data you've put into any systems and make your own threat model to define what you're ok with. If you wouldn't be ok with something published for the whole world to see, putting it on the internet is leaving that in someone else's hands. If you have people specifically targeting you, the best advice is to block them, report them, and move on with life
tldr: hypotheticals aren't healthy, secure your data as best you can, but you shouldn't lose sleep over it yk