1. I'm currently working on lp:~adeuring/launchpad/bug387188-db-schema. The idea is that we should be able to explicitly mark LFAs as "deleted"; if somebody tries to access such a "deleted" lbrarian file, the server will return a 404.
2. bigjools reminded us on the Canonical LP mailing list that we have a restricted librarian. We should indeed store the data uploaded via Apport there, instead of the public Librarian... And we should perhaps add an option for uploading a bug attachment via the web UI allowing people can say "this should go into the restricted librarian".
Two more remarks:
1. I'm currently working on lp:~adeuring/launchpad/bug387188-db-schema. The idea is that we should be able to explicitly mark LFAs as "deleted"; if somebody tries to access such a "deleted" lbrarian file, the server will return a 404.
2. bigjools reminded us on the Canonical LP mailing list that we have a restricted librarian. We should indeed store the data uploaded via Apport there, instead of the public Librarian... And we should perhaps add an option for uploading a bug attachment via the web UI allowing people can say "this should go into the restricted librarian".