Storytime - a girl at my uni mentioned in our school's subreddit that she does OnlyFans. She made the comment from the same reddit account she used to advertise her profile and she also wrote many regular SFW comments and posts. So... she was pretty hot, and me being a horny and curious college dude, I tried to see if I could casually ID them.
Yes, kind of creepy, I know. Horniness aside, the point is, it took me like 10 minutes to find their real name and identity, based only on information they decided it would be safe to publicly associate with themselves. Rest assured, I didn't do anything with that knowledge and I have no intention of ever doing so, obviously. Really big school, completely different majors that spend time in completely different parts of campus, I doubt I'd even notice if I ever crossed paths with them.
People who aren't techies who always have privacy on the mind often drastically underestimate how little information is needed to uniquely ID them. In this case, a) she posted in a specific school sub, b) she posted about her grades in a major-specific class, c) she mentioned her ethnicity in a regular SFW post, and d) she shared plenty of pictures of her body sans face from a variety of angles.
Well now I can know that there's an X-ethnicity person in Y grade of Z major at ABC university who has an identifying tattoo and a relatively uncommon hairstyle... Literally 2 or 3 Google searches later and I had a result. As I'm sure is often the case, she wasn't particularly concerned about the privacy of her regular, real life identity, presumably with the assumption that it wouldn't ever be connected to her OnlyFans. Name on school project websites, articles in the school newspaper, LinkedIns, public instagrams, things like that.
It doesn't take long to scroll through google images and recognize a body. And that's probably what's unintuitive about this risk - someone might think "well there are another 300 people who fit that description, so I'm good". But with computers, it's trivial to look through 300 people. Someone crazy enough could easily sift through 3000 pictures searching for you. They know roughly what you look like. And if the number of people fitting your description is only around 30, it's hard to even call that a search - a few seconds on a page or two is all it takes to ID you.
The good thing is that the vast majority of people are probably harmless. The occasional overly curious person like me might cross some boundaries and find out who you are, but it's not likely they'll have any desire to contact you in any way. The bad thing, of course, is that it only takes 1 nutcase to instill a lot of fear.
I don't think there's a solution other than more education - assuming this kind of content creation continues to exist without heavy regulation. Maybe OnlyFans could play a part. I'm sure most OF creators vaguely know the risks, but they may not be used to thinking carefully about sharing seemingly innocuous and vague details. Like, "Did you know you might be stalked? Yes. Did you know you might be stalked and identified if you share a picture of your dog at the park? Uh, what!?".
A quick 15 minute video on protecting yourself from the crazies could probably prevent a lot of dangerous situations. "Don't share your school or major", "Don't take pictures near street signs or stores", "Don't wear jewelry you usually wear", etc.