Am I wrong to assume that this ability might enable de-anonymization of postings after a server compromise?
In case of a complete server breach, that would indeed allow for de-anonymization of posts.