In the HuggingFace/Bluesky incident, the problem goes deeper than whether the data is "public" or "private"

What matters to people is whether their data was collected, which data was collected, how it may be used, and who it may be used by