Does making a draft list increase the risk of identity theft?