[shuckles]

At the very least, the privacy-respecting solution would be to upload hashes and only upload libraries once some critical mass of users had reported the hash along with a bug. Even then, you would only upload the files themselves from some capped number of users.

[janekm]

That makes no difference from a privacy point of view but would be more respectful of people’s bandwidth limits.

[shuckles]

Yes it does. At the very least, people running custom libraries that nobody else does would never upload data.