Even though user_properties are not public, there are extension which provide aggregate numbers on those, given that most the data is just about yes/no or chosen about predefined alternatives, or semi-public anyway like gender.

I would prefer if watchlisttoken was not stored in user_properties table to avoid it accidentally leaking due the above reasons.

This would also solve bug 55661.

Version: 1.23.0
Severity: normal