I think it should be (is?) a crime to leak data like that, and I think it should be (is) a crime to use data that you "find" like that. However I feel strongly

I think it should be (is?) a crime to leak data like that, and I think it should be (is) a crime to use data that you "find" like that. However I feel strongly that exploring and finding the data, and then reporting it responsibly, should be a protected activity akin to whistleblowing that is not a crime.