Would you prefer someone that didn't intent to report but to exploit the data downloaded everything and the company and you knew fuck all about it?
That's not the only choice available.