Seems like a valid next step, hold leaky honeypots accountable. Anyone holding onto user data these days should be nervous.