Yes, you could expose their vulnerability, however, you logged in with your password, and if you logged in from your home computer, they now have your IP address logged. Now you have been identified....