This is a rendering artifact, nothing more. If you can tokenize and protect PII on your platform, you can protect PII on your public pages.
reply if (metadata.is_public)
Of course they can fix it, come on.
replyThey can easily withold information they put out intenionally.
The whole point of that comment is that it's not that easy. There are potential side effects and consequences that are difficult to architect around.
replyExcept it is.
replyIf you can't easily architect around it, then don't do what you're trying to do.
"Oh I needed to disclose user data in order to make more money" isn't an acceptable excuse.