[cxr]

> FWIW we have a quite a bit of history of allowing people to protect their privacy

Don't overstate it. Out of all the big social networks, GitHub's handling of user privacy is the worst by far. It took 1 1/2 decades to give a switch to toggle off the default behavior of "provide a public index of my activity across the site to anyone, even though I never asked for this (and was never asked if it was okay, either)". To really spell it out, what this means is that for its entire existence, GitHub has offered even worse privacy controls for what a user chooses to share about themselves than Facebook. For the longest time—until now—the only way to get around this was to regularly delete and then recreate your account (which is still an imperfect solution, not to mention labor intensive) or to disengage completely. Given the way that GitHub has positioned itself, it being even harder to avoid than Facebook has had a hugely deleterious effect on privacy for those who actually care about it.

This should have been table stakes 10 years ago.