A porous API endpoint exposes, names, email addresses, country, and site status, all of which can be easily gleaned by anyone with a browser.
Vatican's Official Prayer App Leaks 700K+ Global Users' PII
Summary + source link. No paywalls, no tracking.