I get the concern — if BBL really was raided, it’s totally possible someone (LE or otherwise) could have access to his phone, contacts, or order history. So yeah, reaching out to a random Threema ID, even if they can confirm a past order, does carry risk.
That said, I doubt LE would waste time...