Thought: what if the UUID changed every so often on a random schedule… Like you store the UUID and the date it was created and when a new one is created you also generate using a crypto RNG an expiration date (let’s say exponentially distributed with mean of 4 months). Then when julia starts up the package manager, if its beyond its date, it generates a new one and a new expiration date…
This potentially helps break the individual user tracking to some extent, but also keeps UUIDs stable enough that they’re useful, furthermore, there is an accurate model for their turnover which allows you to do statistics and back out the stable behavior of the community (growth etc)
just a thought to be thrown into the mix.