I was disturbed by that statement as well. It's pure PR spin based on turning a blind eye. They could detect mass malicious activity if a single IP was resett

I was disturbed by that statement as well. It's pure PR spin based on turning a blind eye. They could detect mass malicious activity if a single IP was resetting thousands of accounts. But I'm skeptical they even checked based on the horrible initial flaw and specious response.