Private citizens don't have IT staff, so their security is often unaudited. The law considers authorized access via a vulnerability to be similar, conceptually, to trespassing.
Except its not a vulnerability in the normal sense. It's the functional equivalent of playing a private recording with your speakers turned to maximum and the windows open - just in the EM spectrum.
I'm not contending that using that information wouldn't be a crime, but accidentally collecting it certainly should be held to a different standard.
I'm not contending that using that information wouldn't be a crime, but accidentally collecting it certainly should be held to a different standard.