Wow. Just tested with my @be1d8979…37fe9479 readable receiving address and it was able to extract my full transaction history.
Testing the invoices and/or readable receiving addresses from @ecbe3721…13ed8ea1 and @c9bdb692…234e27a4 both did not reveal that data.
Until this changes I will stop using Wallet of Satoshi. It's a shame, I really like the app.