Or, just disable all kinds of access that compromises privacy. So for example, only allow connections through tor. Dont expect users to be educated. Build a product that makes it extremely hard to do the wrong thing. So privacy and security by default.