I find it rather disconcerting that a report of 'Youre leaking private data publicly' is responded to with 'Good catch'.

No, its embarrassing and would surely put the fear into anyone remotely technical whose org is considering adopting.