That's unusual and unethical. You were right to leave the job. I also suggest you (anonymously) name-and-shame that company, maybe to a reporter. I would argue

That's unusual and unethical. You were right to leave the job. I also suggest you (anonymously) name-and-shame that company, maybe to a reporter. I would argue it is your ethical responsibility to protect those users.