I am halfway through changing the 60 passwords for services and accounts I have used since last September. Cloudflare's COO publicly dismissing the danger with

I am halfway through changing the 60 passwords for services and accounts I have used since last September. Cloudflare's COO publicly dismissing the danger with a wan smile and a wave of his hand was motivation enough for me. That, and this ridiculous statement: "Unfortunately, it was the ancient piece of software that contained a latent security problem and that problem only showed up as we were in the process of migrating away from it," he wrote. My understanding is that they were not "in the process of migrating away from" an "ancient piece of software," but rather that this was something they implemented five months ago and that they had no idea anything was wrong until Google told them what they found. That sort of behavior does not inspire trust and confidence.