I think knowing that this is a vulnerability is fine. The tool is what I take issue with.

I mean creepy as in a violation of a right to privacy. I don't consent to you knowing my phone number or any PII I put into private websites.

It's a lot easier to get caught lockpicking and it has some legitimate uses. This is like more like an autopicking machine imo.