1 + 1 + 1 = precedent.
When disclosure is illegal - or legal (perspective is everything.)
In 2010, querying a public AT&T database yielded over 114,000 email address for iPad owners who were subscribed to the carrier. One of the people who found these emails, Andrew 'weev' Auernheimer, sent them to a news site to publicize AT&T's security flaw. He later ended up in court for his actions. Auernheimer was found guilty, and today he was sentenced to 41 months in prison
If you catch a gap in their db, you're a criminal. If they catch you?
Precedent is the word for the month, I think. What if you stumble across the HS db of gun owners and out them??
Food for thought as the fight intensifies.