The first thing twitter proposes when you create an account : "Do you want to match emails and phone numbers to account".

In this thread : "How can it be possible to match emails and phone numbers to accounts?"

It's not a loophole, it's a feature.

It's in the TOS before you sign up : "Twitter also uses your contact information to market to you as your country’s laws allow, and to help others find your account if your settings permit, including through third-party services and client applications."

How can someone then not realize this is a possibility ? At what moment can someone start to even begin to think twitter is a safe place for endangered people ? It's an ad company, what do you expect really ?