The recent data breach indicates significant security vulnerabilities, making user data highly susceptible to compromise. Furthermore, the privacy policy's omission of any third-party data partners, especially when collecting payment information, raises serious concerns about transparency and potential undisclosed data sharing practices.