> What's the difference between distributing open-source with a known vulnerability and distributing open-data that knowingly violates the privacy of many peopl

> What's the difference between distributing open-source with a known vulnerability and distributing open-data that knowingly violates the privacy of many people? The difference is that software is something people choose to use and update while data is something other people have. The only use of a properly amonymised version of this dataset would be for whitehats who would not do malicious things with the current version either.