I think you missed the part where they included more than just the metadata he requested (they sent the first 256 characters of each email)

his original requests didnt even ask for the subject line. he just wanted to see who emails who to make a graph of how the city communicates. instead they sent him the contents of the emails, including highly sensitive ones