plus CA was an aggregate human misbehavior, people pressing "give away my friends data" en masse. It was millions of people being careless with each others data.