Edit: My comment below was based on a faulty understanding of how EDDM mailers worked and a faulty assumption I based on that ignorance. What they did in reality is little more than sending out spam mail, it was not a privacy violation.

Purely from a privacy standpoint, however, there has never been an indication they have violated users’ trust in that regard.

That's simply not true though.

They have sent out direct mailers that basically equated to a customer list leak.

In regards to the mailers, they messed up and passed blame,

In this process, our EDDM vendor made a significant mistake by not excluding names, but instead including names before addresses, resulting in the distribution of personalized mailers.

I hope you consider a customer list leak to be a breach of privacy. And seeing how they didn't take responsibility but tried to pass blame, they didn't take such a mistake very seriously or respond in a manner that instills further trust.