YouTube’s thirst for video transcripts led to a potentially serious security flaw that could have exposed the email addresses of numerous Google users. An investigation revealed that YouTube’s automatic video captioning tool, coupled with Pixel Recorder’s transcription feature, created a loophole allowing anyone to view the email addresses of users who shared videos through Google Photos. This latent vulnerability could have had far-reaching consequences, as Google email addresses are often linked to sensitive personal and financial information.