De-anonymization is something that we already have a lot of experience with, specifically tying a device to an individual. There’s nothing special about a public key that makes this harder.