There are the third parties like the D&D group and the Hololive merch supplier that throw a wrench into things. Shit like this:
Literally directly confirms her identity to this random-ass guy. Same goes for the stories she told about the D&D group, and how she told them she was a streamer for some God-foresaken reason. If any of these people decide to want revenge on her, and/or decide they want clout, they could fuck her over. This is all encompassed in her needing to have better opsec.