This is the right mindset. Securing huge piles of heterogeneous data while giving PhD students the freedom to "play" with it are quite conflicting goals.
I like their idea of an audit log of analysis runs -- beyond transparency, I'm sure it'll help future researchers know how much iteration is needed to work with the messiness of medical records...
I'm also amused (in a good way) by the fact that SAS isn't supported as an analysis platform...
It's certainly an interesting idea, I remember he was on a few podcasts talking about it. I might submit it here to see if it gets some conversation going
I have huge problems with Goldacre's project because that project has never been disclosed to the general public let alone some form of opt-in/opt-out.
I think the opt out process is the same as the one that came to prominence in the care.data days. It is not a very good process since it is opt out not opt in, and reliant on motivated people searching for a form.
On the other hand I like opensafely's approach to security: no individual data is ever shared with researchers.