2nd half is your approach towards the privacy of users, which he is still concerned about.
I am just stating my own understanding though.
If it is that I really don't see how publishing what is effectively a list of fake IDs used for fraudulent purposes poses any threat to anyone's privacy.