Ah! Sorry. I did miss that they said "you still need to do things like write an impact assessment".

So what's the best course of action? Remove comments feature entirely? Maybe that's what I should do. I wonder what everyone else's doing.