Ok, I see that when create_shadow(user), it sets trust_level: 1, and trust_level_locked: true. I’ll assume that means anon users will ALWAYS be trust_level_1.
Oh, and I haven’t seen the code for it yet, but I’ve noticed that new anon (shadow) users are created for a user after a while, and it leaves the old ones around.
I don’t think these bring me any closer to anon security per category. Does it?