> Access logs with no profile data logged would not compromise privacy would it?

True, but access logs without profile data would prevent you know _which_ profiles were accessed. This matches with the actual claim in the article that they would be "unable to determine which users were affected"