Ah, that's worse than a mere privacy issue! Good point.

I was thinking merely about anonymity.

Both can be largely eliminated by having per host or per organization Identities and using IdentitiesOnly.