Presumably JPM didn't have prod db access to run whatever queries they want, and had to ask for access. They also faked user tables. What makes you think they wouldn't have faked the user activity table as well?
Ok so sometimes when people come to me for an angel investment I ask to look at their Pendo/GA records. I mean you could fake those, but that’s a lot of work and possibly harder than actually getting the business in the first