Regarding the sharedropping grc onto a fresh chain:
It can be argued that the data is out there, that the damage has been done, but you don't see equifax throwing in the towel and leaving their data effectively open to the public, they closed their vulnerability and so did we (yet our historical data is still vulnerable).
What happens if we disregard this problem and a year down the road our 10k+ NN registered (not active registration, historical) start getting email phishing/trojan attempts through freshly scraped email data?
It is a large amount of work, however we're already talking about rearchitecting the core functionality behind Gridcoin already, by snapshot/sharedropping onto a newer codebase we can take many shortcuts to desired functionality, like witnesses/delegates/committee in graphene for one.
Very relevant: https://github.com/gridcoin-community/Gridcoin-Tasks/issues/183