Well, speaking solely for myself, I am more willing to forgive genuine bugs or even targeted attacks (supposing the company being attacked was doing the right t

Well, speaking solely for myself, I am more willing to forgive genuine bugs or even targeted attacks (supposing the company being attacked was doing the right things e.g. no weakly hashed passwords, keeping as little PIA as they can get away with, proper isolation) over misfeatures that hint at deep company culture problems ("Hmmm, how can we profit from our users' data, even though they're already paying us?")