Sort:  

I agree with you.
They should have recognized the security flaw and have responded with their own funds and not make this mess.