You were implicitly defending the existence of this vulnerability by making the unsupported claim that this was "true of basically all the companies that do this." When asked to back up the claim, you deflected.

I'm reminded of the banality of evil. You're not trying to be evil, you're just defending large corporations because you've irrationally concluded from some individual examples you've seen that "everyone does it", and therefore there's nothing that can or should be done about it, including even just mentioning it in a post. That's false, and you're wrong.