So they just re-write all the server stuff from scratch because there may be vulnerabilities in the code that got leaked? And somehow the new code they replace

So they just re-write all the server stuff from scratch because there may be vulnerabilities in the code that got leaked? And somehow the new code they replace it with won't have vulnerabilities? That doesn't seem rational.