I mean, leaving an .xlsx an an unencrypted public wordpress attachment linked directly from your website is fucking clownshoes, but the twitter 'journalist' 'breaking' 'the story' and their 'scoop' YT video making sure that everyone knows that files out there, what to search for, what format its in, what information it contains, and which sites also have copies ain't exactly minimising that flow of information, you get me?