I contacted Google about this issue in November of 2008 - I only received an automated response. (Matthijs mentioned that was why he posted the previous post[1] on the topic prematurely)

Perhaps with the increasing awareness of this issue, Google will be forced to act.

[1] http://blog.cyberwar.nl/2011/05/google-profiles-exposes-mill...