You don’t have to assume everyone is out to get everyone, just that someone might possibly be out to get someone.

Also, whatever you assume, there are legal and moral obligations to protect information in any case.