Is this a new low in terms of a vendor response to their own rookie mistake that put their customers at risk? All that’s missing is the “we take security seriously”