I'm aware. But actually, giving a hacked product access to all data forever is a terrible practice, thus you ask what would the motivation be of doing so. So

I'm aware. But actually, giving a hacked product access to all data forever is a terrible practice, thus you ask what would the motivation be of doing so. So either, it's epic fail for being so open with the role, or the role is for a product that asks for all data so it can scan and scrub, for example. i.e. Shitty security product. Also, sure, it's up to them, but should it be if they can't secure other peoples data?