Not to mention a massive violation of privacy, which they are subject to as much or more as every other entity that processes privacy sensitive data.