Even if that's true, I wouldn't advise going out of your way to worsen your situation because the scale of how widespread such information makes a difference in terms of potential damages. It's like saying large data breach victims should stop caring about the security of their personal information because it has already spread far and wide when the situation could always get worse.

Although there is no 100% security and we're basically just minimizing threats in a manner that is comfortable for us. I think everyone who has a life on the internet should still do the bare minimum of improving their cybersecurity and one of that is to not share their selfie + passport on a public online community accessible by everyone.

As for the hitbtc case, they are famous for that. Try looking up hitbtc threads and you'll see the pattern. I've long convinced myself it's just hitbtc trying to make their users rage quit so they can bag their funds.