Most likely someone showed them some Powerpoint slides, and the hapless investors just did not understand that there could be serious privacy and security implications.

That doesn't mean they aren't responsible and shouldn't burn their fingers; investors actually should look into these things when they decide where to invest.