[aspenmayer]

My threat model is “if the site gets hacked and the user list gets leaked, who benefits and who is harmed? Certainly not the anonymous operators of the site. I only want for the users what the operators want for themselves.”

I do agree with your remediations by the way. It’s not any one thing that makes me suspicious. It’s the subject matter itself. TLAs will MITM and send you a 0day just to find a specific user if they are known to use a site so it’s more of a concern of visiting single purpose sites or niche sites in general as they don’t benefit nearly so much from your signal remaining hidden in the noise of otherwise innocuous traffic to a benign url such as archive.org or youtube.com.

Now that I mention it, it seems that the only indexer blocked by thoughtmaybe.com’s robots.txt is the one for archive.org. Why that may be is curious but I don’t know how common blocking that specific crawler is so I won’t speculate as to the reasons why.