They put in no safe guards. It was designed to give developers access to personal information.

What more do you want?

Criminal negligence is still criminal.

Actually allowing access is not criminal provided they tell you they are going to do so in the TOS.

That's why we need a law to make it explicitly illegal to share any such information at all for commercial purposes. I don't really care if it destroys business models. Maybe some of those business models deserve to be destroyed.