I do not believe upvotes and down votes are enough information to reveal the identity of anyone. If this was truly such a risk, where has the concern for this been on Facebook, where you can see who leaves reactions by name. Or Discord where every account that clicks a reaction is available?
Here that info is not available to the public at large. On Facebook it’s available to anyone who sees a post. Why haven’t security voices been pressuring Facebook to not track social reactions if it’s so dangerous?
This is a feature of social media for the most part. What I write as posts and comments is available to everyone as is vastly more useful info for someone to collect.