You might not realize how many companies make this mistake and worse. Dropbox? LinkedIn?

What is it you think was wildly irresponsible exactly? Not stripping exif data? Facebook did that too. And has had many account takeover bugs.