The lesson here is that custodians can’t trust their users.