Closing thought “ids.xls” is not a single file or single failure; it’s a symptom. Each occurrence signals a chain of convenience, habit, and weak controls that, together, make data exposure a routine hazard. Fixing it requires policies, tooling, and a simple change in posture: assume identifiers should rarely leave their systems of record, and when they do, make every export deliberate, minimal, and accountable.