[mvncleaninst]

> with strict confidentiality so they can be open without jeopardizing their career.

I'd go a step farther, make it anonymous by design so that real name and identity are never disclosed. That way it builds the confidentiality into the system instead of just giving the illusion of it

but... this is probably never going to happen (at least at scale), it isn't profitable enough

but a good historical analogy would be those confession booths in churches. except, instead of going to the local one the confessor goes to one that's far away enough