Does anyone else see how dangerous this is? Nefarious people could obtain common names like this and monitor them for submissions with personal data from ignorant developers testing software.

Sure the issue is with the dev who made the mistake, but the result is nonetheless dangerous enough to warrant concern with security folk.