I think you should re-examine your premise / first principles. Why should we automatically view shaming in and of itself bad? How about instead of calling it

I think you should re-examine your premise / first principles. Why should we automatically view shaming in and of itself bad? How about instead of calling it shaming, simply label it "holding companies accountable"? Why should "a painful feeling of humiliation or distress caused by the consciousness of wrong or foolish behavior" be something people are prevented from ever feeling? Is it not sometimes merited? Bad feelings, pain, suffering... if these should be avoided at all cost, what about the people whose private information can be stolen and is then put at risk by bad practices... some which are clung to even in the face of overwhelming evidence presented? In other words, someone might have to suffer to some degree, if mistakes are acknowledged or if they are not, It's just a matter of whom... should it not be the companies and, to a much lesser extent, (causing some slight embarrassment to) those representing the company and arguing with people providing helpful advice, instead of innocent customers paying a business to secure their information, wealth, livelihoods etc? Or avoid all shaming, consequences be damned?