> if, say, the community was hacked and private email addresses (or other PII) was leaked.

Or just basic ISP, or other provider, logging domains visited per user.