Could you please stop breaking the site guidelines? You have repeatedly been abrasively personal in comments here. That's not what this site is for, and destroys what it is for.

https://news.ycombinator.com/item?id=50130544

https://news.ycombinator.com/item?id=50105875

https://news.ycombinator.com/item?id=50072114

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.

> and PII?

Feel free to email me if that is actually the case. I can't see anything that would confirm that.

Edit: I have dug into it. No credential/secret/email leak... the complaint as "leaking PII" is not really substantiated in the dangerous sense. The only real exposure is real first+ (optional) last names (already public-by-design inside the app) being readable by unauthenticated callers. I will let him think through the implications of that instead of helicopter parenting.