I don't understand your reasoning. To me, you seem to be saying that since the state violated everyone's privacy, the general public now has the right to violate these individuals' privacy even further to get back at the state.
Publishing the list as-is would also imply that you believe the state is infallible and can't err when putting people on this list. There are thousands of people out there who have redress numbers because they have the same name as someone on the list. Can you imagine if getting a redress number is necessary for employment? Leaking the list would ironically increase the state's control.
(edit: Again, I'm not disagreeing with letting individuals find out if they themselves are on the list, just disagreeing with the method)
