I think you're right. But if they had leaked information that wasn't public, we wouldn't have a way to verify it, right?
Disclaimer: I'm no expert on security. I just like applying my things-I-might-do technique.
I realized my mistake a few years later and went through quite the endeavor to fix it.