Thanks.. That makes perfect sense. That said, I can't help but feeling misdirected. I mean, obviously the cap on the number of compromised accounts is relevant

Thanks.. That makes perfect sense. That said, I can't help but feeling misdirected. I mean, obviously the cap on the number of compromised accounts is relevant, but I think more relevant is the fact that 100% of the accounts were completely insecure for hours. Misdirected, because as a user I don't care at all how many accounts were actually compromised. This isn't a no-harm-no-foul incident. It's an enormous breach of trust that causes me to completely rethink what I'd be willing to do with their service.