Absolutely you are right just a click either by a mistake the person become the subject of discussion and that is why we need to be extra careful especially when are are in charge of sensitive information.