After installing bbPress I discovered to my horror that the IP number of the author appeared in each post. I have now edited the php files on my installation to comment that out (I found three cases). It is crucial that the server NEVER SENDS THIS OUT, since it completely defeats all other privacy measures. Just hiding it on screen is pointless.
The problem is that now I cannot update bbPress since that would restore the security vulnerability, unless there was aa feature added to turn this off in the Settings.