For everything you do, you should consider "what if this is used by the worst person to target the most vulnerable people?" Stalker exes, online scammers, insurance companies, 4chan wieners, toxic MRAs, data brokers working for PIs etc. Assume an open S3 bucket with data from 5000 users. Imagine how much identify theft and intimate partner violence that could enable.