While they are not primary leaker, Firefox Monitor providing the information this way is disheartening.
Most people in my network do not know about Have I Been Pwned (the source of the scan data), but they _do_ know about Firefox.
This brand recognition and resulting media impact will spread my bits of personal information wider and into my direct network of contacts.
I'd much prefer a qualification requirement. Make me click a link in an email you send when I ask for information about an email address instead of providing unfettered access to a list of (breached) services the email was used for over the past decade.
I expect better from Mozilla/FF.