Background: A good question got brought up in T400722 about how we handle private registrants. I think the main question is: Do we add their contributions to the aggregate data? If we do, then I guess someone could maybe try to guess who was a private registrant for the event. But the aggregate data would be accurate and comprehensive. If we do not, we would protect the user, but some people would see different aggregate numbers, depending on how they are viewing (for example, organizers and admins would see different final numbers than regular editors, which could create confusion).
Perhaps, for the MVP, we want something simple and protective, so we can hide all private registrant data from people who cannot see the info, but maybe we can have some help/more info indicator that can say that final numbers may vary, depending on whether they have permission to see private registrant data.
Then, for post-MVP, we can explore how we improve the data experience.
