Not 'mostly' its pure clickbait.
> only surprising part of this story is that they managed to find a stupid pr person who gave a bad quote
They did not do anything wrong and they don't do what the article implies. The response is 100% correct and when confronted with 'what about this' they explained it like the non issue it is.
Its HTTP GET parameters. Not for specific user but for filter range, that's it.
The article is prime example why people don't trust the news.