I understand the psychological need, but I agree this is going to bite them at some point.

A "community" is the weakest link in their chain, it seems. Even if you get your OpSec 100% tight (very, very hard, if not impractical), the human factor is never securable.