If this sounds like your week
Every share is a leak until you prove the EXIF is clean.
Searchers type “Strip lens model EXIF on delivery ZIP open-source repo screenshots” after a close call or a policy reminder. The risk is not theoretical: GPS, owner fields, and software strings embed in files people already sent. Editors shipping folders often inherit embedded attribution and location fields that downstream contracts forbid.
Where tooling usually breaks
Cloud “scrubbers” add a new trust boundary.
Uploading sensitive work to a random site to remove sensitive data is a category error. The fix should be on-device, deterministic, and boring.