You are absolutely wrong on your approach to this. If there is no transparency into what happened, there is nothing but the companies word that it won't happen

You are absolutely wrong on your approach to this. If there is no transparency into what happened, there is nothing but the companies word that it won't happen again. In the case of SolarWinds, their word means less than nothing. When you have a breach of this magnitude, people need to understand how the attack happened and what technical or process controls you have put in place to prevent it going forward. The biggest issue with SolarWinds breach is they have done nothing but try to obfuscate what happened. When they did press release, they said it was a "Security Vulnerability". WRONG!!!! There was a backdoor intentionally placed in their product and sent out as update to tens of thousands of customers. At the very best their response has been uninformed, but knowing what we know about solarwinds as a company it seems intentional. To date they have not corrected that release and still often times refer to it as a vulnerability.