Anonymity by default is not always best