You are not wrong,
It is also an issue with most government owned app/sites that provide detailed information just from ic number,

But as you can see a lot of Malaysian takes cybersecurity and personal information lightly.

IC number should be kept as private as possible.