Yes, not only was there no formal vetting, the access granted was extremely wide.

Yes. We don't know who has this data, where it's stored, who has access to it, and who pays their bills.

This whole thing is built on heresay of unscrupulous people who claim to know better.