I basically agree, but I'd also say: Every Gmail user has already accepted such a promise as sufficient.
But the Spirit customers may not have a Gmail or even a Google account? I personally don't.
I wouldn't be surprised if Gmail data has far more access restrictions internally at Google than this auction bought dump.
But the Spirit customers may not have a Gmail or even a Google account? I personally don't.