Very plausible.
This whole thing smells like the draft memo was intentionally "left on the front counter" so that yet another POS leaker would take the bait. Employee loyalty validation is not uncommon and this just might be what happened here.
I have serious doubts that Bondi and Patel are doing anything other than what they, and DJT, promised they would do.
Operational security often requires disinformation and other tactics. This is not the first example of it. Nor will it be the last.
Just my 2 cents. o7