When said "beginners"[0] are responsible for the loss of tons of private user data, I don't think that's acceptable, understandable, or easily dismissed. Perhaps shaming is not the most appropriate response, but there should be repercussions. Legal and financial ones, preferably.

[0] As others pointed out in sibling comments, these people are not "beginners" by any stretch of the imagination.