The &quot;privacy violations&quot; statement is what I was talking about. I suppose you could make an argument that this is not <i>sufficiently</i> explicit for this scenario, but I believe it covers this ground. It is a privacy violation to retrieve sensitive data via an exploit.