Because, to be honest, it was entirely foreseeable. It's awful software engineering practice to just gloss over and ignore the privacy implications of this sort

Because, to be honest, it was entirely foreseeable. It's awful software engineering practice to just gloss over and ignore the privacy implications of this sort of feature! These risks should've been brought up during code review (if not when the feature was designed and specced) and there should've been an opt out added to the Privacy settings dialog.