submitting crash data with apport-collect

If Ubuntu package X has crashed, and bug N has a task for package X, and I run "apport-collect N", does that attach data gleaned from the most recent .crash file in package X on my system? https://bugs.launchpad.net/ubuntu/+source/unity-2d/+bug/882300/comments/11 indicates that it does, which I was not aware of, but I figured it would be more appropriate to ask about that here than in bug 882300, since I am not sure the information provided in that comment is incorrect.

If that is the behavior of Apport, wouldn't that be a security problem? After all, bug N may be public, and if apport-collection can attach crash data like registers' contents, stack traces, and core dump files without requiring the user to undertake the explicit step of marking the bug containing the data public, that seems like a lowering of the threshold for undesirable information disclosure.

(Please feel free to answer if you have an answer to the first question but not the second.)