Is it a vulnerability that a certain service does not hide the email addresses of its users well?

Question

Email

There is some service where you can post your comments. When posting, be sure to include your email address and your first and last name. The commentary is publicly available. First and last name are displayed. Email is not displayed, but if you search well, you can find it :).
My personal opinion is that emails should not be available. Some emails are logins for authorization on this service. Plus, you can collect a targeted spam database (email + first name + last name + something else).
Does it make sense to publish an article on Habré on the topic of this vulnerability, how it was discovered and what needs to be done in order not to step on this rake? Naturally, the article is published after the hole is closed.

Answer 1

The best way to find out if a post makes sense is to make it. If after that the publication received a positive rating, and the author did not end up in ReadOnly, it makes sense.

Answer 2

If the jamb on the site is non-trivial - you can tell, IMHO.

Answer 3

Here, when registering or in the settings, the user must choose whether or not to show his mailbox, this is his choice. If there is such a choice, and there is his soap in the traffic, then of course this is wrong. habrahabr.ru/post/257951