Through companies and schools using them for essential functions, they've normalised posting sensitive data without checking.