There might be issues with compliance with GDPR
Just because automattic says its publicly available information doesn't mean it is and that they are allowed to process and publish it.
They are essentially publishing info about test and dev sites and, by associating sites with WPE, also info about infrastructure that will be like a big christmas present for bad actors. And thats being published by a company that is a huge data processor of highly sensitive info itself. Thats problematic, i think.
There is talk on reddit about reporting this to EU data protection authorities.