Privacy in this case is in an infosec context. Not a personal information context. Finding the open&#x2F;unsecured&#x2F;unpatched server is a bug. Downloading and testing a password keyring found as a result of that bug is not finding a bug. That is exploiting a bug for additional gain.