Is it wrong to suggest that a crime victim should have taken greater precautions?

My wife and I were discussing the recent iCloud data breach in which a hacker stole and published nude photos of hundreds of female celebrities. I made the comment that while the hacker’s actions were despicable, at the same time I thought the celebrities were stupid to have trusted iCloud to protect the privacy of their photos in the first place. My wife balked at this, saying that this amounts to blaming the victim, and is no better than saying a woman who is raped was stupid for wearing a short skirt, or for drinking alcohol. But I see it as being more akin to saying a person whose bag was stolen from their car was stupid for leaving the door unlocked. Do comments of this sort really amount to ‘blaming the victim’? Is it proper or improper to make such comments? Does my level of expertise or the victim's level of expertise make any difference? (As a computer engineer, I am very aware of the dangers of the cloud, whereas your average celebrity would probably be clueless about it.) Intuitively, I feel like the comments would be improper in my wife’s example, proper in my example, and I’m unsure about the data breach itself. But I’m struggling to identify what the defining characteristics are for each case. What's the right approach here?