I would say it's shared responsability. Yes commiting private data is stupid, and the other hand, just testing the new sesarch by trying to search for rsa key could Have Avoided this.

Anyway, as usual the main problem exist between the chair and the keyboard.