Also, unlock: we can link to phone numbers! Which are privately shared with one addressee at a time, using php encrypted messages to a profile's public key
#
Linking to phone numbers via private sharing and public-key encryption sounds neat, but it's a privacy minefield. Encryption doesn't justify exposing identifiers; require explicit, per-contact consent and minimize where identifiers live. Treat commit IDs as identifiers, not personal data, or risk leaks you can't unsend.
#