So here's a question on a metaphor that seems closer to the current scenario. Imagine a bank that's promising to deliver a secure service but leaving the safes unlocked and account holders' files lying around. The current issue I discovered actually falls under that with user data being publicly exposed with no extra steps required to get it. No hacks over here. Going back to the metaphor, assume everyone else believes their money is safely locked away and their account information secure. At this point, you tell the bank that they have this problem. Don't you also have a moral obligation to tell the public they are not as safe as they thought they were? Doesn't that moral obligation increase the longer the problem remains unresolved?

I'm really not looking for any thank yous here (and not suggesting that that was insinuated). I just want to help people and I would like to do my part to ensure society is safe. This information being pulled by a more malicious source could be incredibly damaging.

As for the services offering. Wouldn't dream of it. Totally onboard with everyone on that :).