I am not saying that the sec researcher is right here.  I don&#x27;t care about him, he is just some random guy who wants publicity.  Talking about FB is more interesting because it is a huge public corporation which should behave smartly.
But if you want talk ethical&#x2F;not ethical -- he found a serious problem in their infrastructure.  Had he not looked at the data (&quot;respected their privacy&quot;) he wouldn&#x27;t have found it.  You can&#x27;t make the omelette w&#x2F;o breaking eggs.  Perhaps this is more of penetration testing, not bug bounty stuff, but again, i don&#x27;t care.  He found stuff. He didn&#x27;t use it (AFAIK) for anything bad.  FB has to thank him and quickly fix their process.  Complaining to his boss and acting all pissed suggests that they do not understand they they did mess up big time.