I don’t disagree that competency is an element, but your analogy is lacking because the user provided the information that increased their risk (sharing their photo IDs and real information).

Its more like the share buttons on porn sites. If you’re logged into a social media site while browsing porn and accidentally dox yourself, it’s partially your fault for creating a situation where that was possible. Yeah, having the share buttons is a terrible design, but also you have to be doing insecure stuff too.