Similarly I don't think "emailing our users to inform them about this policy change" is reasonable – I have accounts with well over 1,000 different services (according to my 1Password), the chance of me reading a policy email from any of them is pretty small!

→ View original post on X — @simonw,