Nice write up: another one in the "making things worse in an attempt to

Nice write up: another one in the “making things worse in an attempt to fix them” category.

I’ve never run an online mail service, but it seems like a good idea to make data loss impossible. For example if their journals included the full messages instead of their hash codes, they could have restored easily. Could they have used an append-only journal at the core of their design to avoid data loss?