So I wonder how much of this is related to an article I read a while back about certain cyber sec (legit or not) university programs that encourage (read: require) their students to essentially pull this stuff in order to get their names out there (name of the individual and/or the school). The effort is pretty much a naked attempt to drum up a pile of "finds" and show your socials that you are a 'security professional' (padding the resume, so to speak). The thing about this effort is that those schools are actively driving their students to do this in order to graduate, if the article was correct..... Not certain if this is the other side of the situation, but compelling.