It absolutely is and it's also the reason the FDA has a process you have to follow before doing human testing before potentially killing people with a new treatment you're trying to develop.

Yes, exactly. There's a process to follow to minimize risk in human testing. Human testing isn't categorically banned.

Correct, because we thought about the cost and risk of early human trials. Which isn't the case here. You're happy to forego any protection of the people involved.

I think the case is that people have put quite a bit of thought into costs and risks of big-data aggregation of DNA and come to different conclusions on what risks are realistic and what the consequences of those risks are.

They clearly haven't since they didn't even bother asking their users.

It would be hard for them to be more clear about it.

https://www.23andme.com/about/consent/

"Which of my personal information is used for research?"

"Your genetic data and any other personal information you enter into the website, except for your Registration Information (name, contact information, and credit card information), may be analyzed in the research."

It really seems people are complaining because 23andme didn't demand they sign a consent for something they had already explicitly signed a consent to. I, for one, assumed large third-party pharmaceutical companies would have access to the data when I volunteered it. Is there significant risk people misunderstood that? How?