Privacy-safe diagnostic form: neither the transport address nor factory-burned device ID may enter logs.