This topic is getting way too heated for my liking, I am putting this topic on freeze for a week.
-
I am going to now update the old release notes with a very clear description of the feature that is prominent
-
I am going to update our releases topic to ensure we call this out properly in the upcoming major release on the blog, I feel it is an important measure to default protect user data so it should be announced properly when we finally release 2.3
This change is good for 99.9% of the communities, the edge case 0.01% that use Discourse as an identity provider or some other obscure case have a clear workaround.
EDIT
(1) and (2) are now done, see: