Anyone who has access to a server either authorized or unauthorized could have done it. |
Obviously they want to make the numbers as high as possible, so I suspect most people choose the highest number without doing any filtering. |
They have a way of identifying when users installed it, and also when they actually used it. |