The "they" could be AirBnB employees, but it was probably a reference to hackers breaking in and copying those files from AirBnB servers. The fewer servers that have a scanned copy of your passport, the better.