That's exactly my point. Because some users don't understand this technical issue, you shouldn't use personally identifiable information in URLs. They might pos

That's exactly my point. Because some users don't understand this technical issue, you shouldn't use personally identifiable information in URLs. They might post it to services with enough entropy. But they also might post it to public parts of the internet. I use HN comments as an example of an unsafe way to share URLs with personally identifiable information.