Maybe both things are right.
Edit: Since, looking at the downvotes, this seems to be controversial, let me clarify that I'm not blaming the victim, I'm questioning whether it's a good general policy to give everyone, including various bad actors, a vast database of information about you, carefully indexed and attached to your real name, that they can then use against you.