It's ironic that people concerned about privacy email the ESRB to warn them about this in turn have theirs somewhat violated by the ESRB themselves. It's not the same though. An email address by itself doesn't mean much necessarily. I've got several, only one of which even remotely resembles my name and it doesn't even tell you that much.
Giving out a full first and last name is not the same as an email address though. And even knowing that much is not the threat it is sometimes made out to be (with obvious exception), it's enough to worry some people genuinely. I used that spokeo website for instance. It found two people in my city with the same name. Different middle names but identical in other ways.
Enough so in fact you could confuse me with them. Similar age, ethnicity and gave the generic information probable to any number of people with a given background. It did get wrong my marital status, my residency history, education background and an number of other factors that could easily lead someone to mistake me for the other guy and vice versa if you did not personally know either one of us or just had a name to go on and little else.
So assuming that one of us was using this Real ID or similar privacy-invading "features," you could get the wrong person. If the person(s) looking for information on one of us got the wrong one, you could imagine the problem that would be. Especially if they were intent on doing harm or committing some other criminal act.