Sounds like they were using a vpn on their device but didn’t actually bind it to qbit. The solution you posted is exactly how you bind it to the vpn. So now even if the vpn leaks, qbit will cease to up/dwn. Glad you guys learned and hopefully you guys never get a letter again.
While its impossible to get leaks of anyone since it depends on the people who decide to leak it, you can find it on sites such as Coomer.su but if you want more porndude got a whole list of them. Have fun with your endeavors…
You are amazing for this thank you.