It’s not clear to me how this is a data breach at all. Did the researchers hack into some database and steal information? No?

Because afaik everything they collected was public web. So now researchers are being lambasted for having data in their sets that others released

That said, masking obvious numbers like SSN is low hanging fruit. Trying to obviate every piece of public information about a person that can identify them is insane.