This is pretty much exactly what was discussed a couple years ago. IXP operators should not have visibility of commercial arrangements between members. The proposed IXP has to have a technical understanding of those arrangements (or risk dropping packets), or have an opt-out to turn all the "security" features off.

And the first thing to be turned off when troubleshooting a problem will be the IXP meddlin^Wsecurity features. And they'll stay off.

Or participants will migrate to AKL-IX/Megaport.