No, here in Australia, director's information must be place of residence; although there is a process for suppression or replacement based on personal safety needs, for most that'd be closing the stable door after the horse has bolted. What's more, the information is still in the database, it's just masked in standard extracts; the data is one weak password away from exfiltration.

I believe it is most certainly victim blaming. The existence of terrible people may well induce one to recommend countermeasures, but the phrasing "stupid enough to put their personal details out there" is first-class (and thoroughly obnoxious) assignment of responsibility for bad behaviour to the victim of that behaviour. It's the same logical construction as blaming rape victims for their clothing.

As for "attract enough attention", the bar for that has been lowered in recent times to "one tweet".

These are not happy times to be a private citizen communicating online in anything but the most closed fora.