I think it is more likely the web devs didn't know or care what they were doing and they were just working on contract and they were told to put a button there so they put a button there. The middle management responsible for it probably fucked it up due to simple negligence and not carefully reading a stack of requirements and just not being at all engaged in the broader issues other than delivery. Someone who actual gave a shit probably got a few sentences into the requirements doc somewhere around access controls and PII concerns, but it was not called out clearly and just missed.

But yeah whatever really happened I'm quite certain that "the government of California just DELIBERATELY and with MALICE doxxed all the judges with carry permit" is the argument which needs to be met with "that's a hilariously large load of speculation".