I didn't necessarily have a specific attack in mind when I looked for the issue. However, the way I would use it is any scenario where I want to either find ou

I didn't necessarily have a specific attack in mind when I looked for the issue. However, the way I would use it is any scenario where I want to either find out more information about a certain list of people, or where I want to alter the content I show to specfic people. It is a pretty specific attack vector, but a verifiable identification could be high impact in those few cases, and it would also be trivial to fix it.