They should at least provide a meta tag or response header with noindex on those pages to prevent shit like this:

https://developers.google.com/search/docs/crawling-indexing/...

If they didn't BB did create a privacy leak, because in that case all those pages could be potentially indexed by GoogleBot or anyone else, and you should create some more noise in their direction.