Hopefully João can address this when he returns. I just wanted to get the post up so I do not forget and to give others a heads up on this security issue.
When Creating A Taskernet link especially with a Project, there is a false sense of security that only the Profiles, Tasks, and Scenes contained within the Project will be exported.
In Reality Tasker will include any items that are outside of the project if they have any link to any entity within the project. This can reusut in a huge amount of unintended data to be included in the link or even worse in a very large project there might be a small task that has private data within it that might not be detected in a review.
I believe one solution would be if there are any linked Profiles, Tasks, or Scenes outside of the Project then you would get a simple dialog that would come up just after compiling the Link that alerts you to this and perhaps even listing the names of the linked entity's and if you want to proceed.
The same could be true for a exported Profile or Tasks. If there are any extra linked Profiles, Tasks, or Scenes included then the Dialog would be shown.
Thoughts????
Same discussion can be seen here on Reddit..