"De-identified" data is trivially easy to re-identify, especially by google.
https://www.nytimes.com/2006/08/09/technology/a-face-is-expo...
Sure, you can argue that its a bad deal, shouldn't be allowed period, etc. But that is a different argument than saying that there is no scrutiny.
Specially when you have a list of flights, people on board, issues, etc... The fact that they are specifically tellling people to not worry about that is also a red flag for me. They know what they'd worry about if they were the affected ones.