@manton I find that assumption unsupportable. Maybe technical people who have first-hand experience with data loss may be careful about backups, and even then it’s a poor assumption.
Alsö, I can’t imagine camera model being sensitive but there’s no reason not to strip the two or five fields that you are suspicious of, not the whole EXIF block.