It’s surprising this hasn’t already lost someone a billion dollars

this is too funny. you can leak just about anything you want and there will never be any consequences. you probably don’t want to deal with COPPA stuff but outside of that you can leak just about anything you want without any legal consequences (personal ones, the business may close but that is also unlikely, see experian for good example of incident that should have absolutely shut the whole business down but of course we know how that plays out…)