Yeah, the way that ID/CID are treated in searches is fine. The problem you’re describing could be better addressed if opted-out observations were automatically set to casual or unverifiable (which also makes them casual). This would have the added benefit that they wouldn’t appear in ID queries unless the ID-er actively looks for them.