It is misleading to say it was leaked because there’s no evidence that anyone saw it.
If no ones data was stolen, was there a leak?
It was unsecured, but it was not leaked unless someone accessed it. To try and pretend that there’s no difference is pure idiocy.
Great analogy, but not for the point you’re trying to make.
If your house plumbing is leaking there is water going out where it shouldn’t be. You’re saying it’s a leak just because there’s a tap out near the footpath that could be turned on by someone to use your water, even if not a single drop of water has ever come out of it.
With an unsecured server the data isn’t going where it shouldn’t be unless someone takes it. Without evidence of someone taking it, nothing was leaked.