To add to the comment by @Bawolff, I think the blacklisting approach of id attributes is similar to what the AMP4Email Sanitizer of Gmail does [1]. That could be indeed another viable solution, but it may be a bit brittle since the code could evolve and the list need to be updated once in a while.

Sounds great, I think making the report public could be beneficial, particularly to increase awareness among developers!

Thanks for checking the report. I am happy to answer any questions.