[southerntofu]

> There is no reason to believe that Twitter did anything wrong, and excellent reason to believe they didn't.

Why do they ask for personal information in the first place? Why are DM messages not e2e-encrypted? That's plenty of wrong already.

If you're building a public/global microblogging platform, enable nicknames for all and never ask for any personal information. If you're building a private messenger, enable e2e encryption (or at least at-rest inbox encryption).

If you're building both, and ignoring all security best practices, and encouraging people to give away their phone numbers, i would hold you responsible to any harm that comes their way because of this.