Unacceptable. What craven view of ethics puts any concept of "user experience" above treating others truthfully and respecting their privacy, property and personal domain?

This is not a "mistake". Why would anyone want to have anything to do with such people, much less be their customer?

This warrants punishment, not forgiveness.