One problem here is that comments are public, but users put all kinds of random stuff there like email/website addresses. I *think* it's clear enough from the crash reporter dialog, but we may want to add something like an email scrubber here.

It might be worth checking for patterns that look like URL and email addresses, as well as a list like "comments", "urls" for fieldnames, and scrub these somehow for unauthenticated users at least.

This might be overthinking it though, and it's certainly something we want higher-up e.g. in the models themselves maybe (because we want to follow the same rules for the HTML output as well as API)