@feld @jomo @lorenzofb what do you mean? It states that your ancestry reports as well as additional information "including genetic variants related to health" are shared with genetic relatives if you enable the related feature.
How even the most basic ancestry information can be used in the wrong hands is not that hard to imagine.
https://www.wired.com/story/23andme-credential-stuffing-data-stolen/
And I would think the fact that it states only genetic relatives receive this kind of data would be enough to reassure users that the data was reasonably safe.
Again imo access to that feature should have been restricted to user accounts with a certain minimum level of security, including 2FA.