Every report is requested by a wallet and recorded against it, so the record says who asked.
Connecting shares an address. Nothing is signed until a review is submitted, and every report published is public.