This has been warned about in the security community for years. Even if the person guarding such a database is a saint, which he is, the mere existence of the NON database is a threat to the privacy of everyone on the planet.