Bad, bad, bad...

I think the main thing to think about, from a policy perspective, it this: Theo has cut himself (and potentially others) off from a potential source of information: namely, people who know about a potential security issue, but doesn't want to be fingered as revealing it; who would prefer to keep the issue itself a secret rather than risk exposing his own identity. Those people will now not mail Theo (or potentially anyone) for fear of being exposed.