"People"? No. Server operators, yes, but that's true of Twitter as well.

The disclosure, here, is that anyone can read private messages. Oh, and also edit posts.

And no, this is not equal. The Hive authors seem to have completely failed to implement authorization for their API, allowing (it seems) anyone with a valid auth token to make a request as any other user, granting everyone access to everyone else's data.

This is a "car company doesn't know what seat belts are" level of incompetence.