If it could be sketchy the public should know about it.

The people that didn’t change their password after it getting leaked should also know about it and update their info.

Whistleblowers like Op are doing the right thing. No blind faith in some dear leader.