You raise a kind of interesting question, as I always assumed it was the casino staff and not outside "security firms" that did that sort of thing?
Are you claiming that OSN (or whomever) does anything other than compile, collate and disseminate info reported to them by the casinos, e.g. do they have "agents" in casinos who are actively trying to discern which unrated players are AP's?
I think not, but hey, I thought I was wrong once but I was mistaken.