Let's assume account ID shuffling is too hard. They still need to get rid of the vulnerability, and they could still provide name changes. The Blacklist hiding people isn't a bad idea on paper, but it cannot work on this account-wide basis because it still enables abuse from someone using it maliciously. And then it's already been talked about, all the crap with even blacklisting not taking you off of friends lists and the like. Just bad design that FFXIV is not nearly old enough to be excused for. The devs need to be taking this very seriously. I believe they do take the general idea of harassment and stalking seriously. That they answer feedback about implementation for things like Duty Finder/Frontlines shows they've been aware of the need for these considerations. But then why did they decide to send raw, unhashed account data client-side when they KNOW mods and plug-ins are extremely prevalent? Whatever mindset or oversight of account security protocol led to that needs to be fixed in their offices as much as the security vulnerability itself needs to be fixed.