OK. While I do not understand at all why keeping paths in .lyx file, as we have always done, suddenly becomes such a huge concern, I do understand that such information is not needed when reversibility is *not* desired. Therefore, I propose that, either through a RC entry, a menu item, or an option when an bundled file is saved, some option like 'clear private data'. When this is selected, all embedded files are coded by something like md5 so there is no trace of their original location in the bundled file. This can (should?) be done even for in tree files.
The file produced in this way would be ugly if unbundled, but it at least gives you guys a peace of mind that no personal information is leaked. Note that I will not do this by myself, at least not at a high priority. Cheers, Bo