Developers wanted to use those APIs to deliver features. The privacy implications were not considered until the cat was already out of the bag.