Hi Adrian. Thanks for pointing this out to us. We don't think this is a severe problem (we don't have any records that we consider to be private), but we're working on restricting zone transfers on imperial.pidgin.im. Thanks, Mark