I felt the same way reading the article. At the places I've worked there's a (sometimes informal) "personal information firewall" between production data and engineering, where employees could not correlate user accounts with actual people's personal info. Plenty of anonymized data to help make product decisions but no ability for rank-and-file employees to figure out "user 14339 is Mark Hamill". Scary!
There are no user accounts on the site, and there is no tracking of any users. I simply saw the avatar image that he posted and targeted that, so probably a few random users got Darth Vader as well.
Also, even if there were user accounts, this is a one man shop, so it would be hard for me to build a firewall between myself and myself :)
Except that he also doesn't have that information. All he has is the picture that the user posted himself, that isn't linked to a user account since there aren't any.
