Many users just “feel hacked” because they don’t know that gravatar JSON API returns more data by only passing their hash which is available in every avatar img src like this: gravatar.com/[hash].json

From company point of view this is obviously not a hack but public data, documented e.g. here: gravatar.com/site/implement/profiles/json/