iirc, internet service providers keeps records of traffic
So if person regularly use SB, with these folders: thought, plan, project, problem. They can predict future actions of user and can make profile of them.
We can use displayName attribute with UID or Date as file name. But it have its own problems
If you are exposing your SB instance to the internet somehow, you should at a minimum be using https, which means your service provider only knows that your visited your SB instance, but nothing else, not at which path or what content you viewed.
Indeed. Effectively SilverBullet only works via HTTPs (or localhost), so paths are not visible to hosting providers.