What part was silly?
My friend did keep her mouth shut.
She told no one. I am her friend and business partner and I had no idea that she had physical PMs until after the incident.
She did everything right and still almost got murdered. Her only screwup was not being armed 24X7. She and hubby were unarmed when the surprise stickup went down.
My point is that when you order PMs from another state, someone at UPS/Fedex knows that a package left a PM seller and went to a particular address. It could be a driver, clerk, manager, or whatever.
Or it could be an employee of the bullion seller who sells the info on the black market for money. It could have been a bank employee who knows what credit cards numbers and addresses are tied to bullion sales.
So how do you practice OPSEC?