> I do wonder if they could've secured themselves with VPN and "untraceable" anonymous emails (e.g. asking for a guarantee that they won't be sued/charged), although the teenage bragging rights would've been too tempting.

If you read TFA, that is effectively what happened. Even with the guarantee, only one of them revealed themselves.