I actually think it would be the opposite now. Things like bug bounties or a huge PR problem by the affected problem posting it on Twitter are new things. It was more prevalent to send lawyers for accessing public but not meant to be public URLs back in the days than it's now.