You forgot “don’t say ‘thank you for pointing out that we were sending social security numbers to everyone who visits our website that anybody could stumble across,’ but rather ‘you will be prosecuted to the fullest extent of the law, hacker!’” Courtesy of the Missouri Department of Education.
If you’re random Joe Schmoe who happens to need a database, I don’t expect you to contribute. But when you’re of the largest tech firms in the world…