I only claimed a minor barrier to unmotivated tracker stripping. By that I mean a hurdle, not tamper resistance. So in the worst case you're no worse off than w

I only claimed a minor barrier to unmotivated tracker stripping. By that I mean a hurdle, not tamper resistance. So in the worst case you're no worse off than what the existing unencrypted system affords you. Indeed, rotating the key here serves very little benefit. Thinking out loud: I suppose if they strayed further from the light and started restricting timestamp linking to share button URLs they might want to rotate the key to frustrate anyone looking to generate anonymous timestamp links. In that case, you could do something like include some indicator of which key was valid on the day it was uploaded. That limits the blast radius of a leaked/cracked key to the ability to generate timestamp links for all videos created during that period. Still low stakes, but now we need care more about integrity. Also, I wouldn't be surprised if updating the video ID scheme is a huge ask, so at that point a new DB might be the easier solution.