Exactly! Would people would rather have them SELL the data? These guys did everyone a favor. If they just went to AT&T with it first, AT&T would have never said a word about it, denied it and then go on as if nothing happened. GoatZe (Sorry, MacRumors doesn't let me spell it properly, being a "bad word" and all) acted in a sense like a whistle blower exposing the ridiculous manner in which AT&T had this system set up. Anyone in their right mind would have a more strict and encrypted method to verify someone's email address then they way these blow-hards did. Really AT&T? With all your billions, THIS is the method you came up with?
Anyone who is saying "I hope they throw the book at them" is missing the point. I will be thanking these guys, not condemning them.