How would Molly's name get out? Let's assume we or our clones make dropoffs personally (for now let's assume we aren't using the portal as a breachhead). Creating a completely secure dropoff that is impossible to trace by mundane means is trivial. Molly has BMI, so she can be anyone when making dropoffs. Molly has RVD, so she appear in a completely sealed room with only a water pipe to drop off supplies. Molly can teleport into a completely sealed room directly from Sanctuary if the room has an audio player with an appropriate music. If done at least somewhat correctly, there's no way to associate Molly's name with the deliveries of new drugs without having some clues about supernatural.Why would it go unnoticed? If we start selling a new drug(s) on the market the people who pay attention to such things are going to notice. If the wrong person gets interrogated or some such and Molly's name gets out we then become a person of interest.
Like, setting a separate BMI-fueled identity should be trivial for this. Basic security.