Unbelievable, have many times have you seen AWS explain an outage (or PII leak like this kind) as open source library bug? Have they asked 5 whys? Why the bug

Unbelievable, have many times have you seen AWS explain an outage (or PII leak like this kind) as open source library bug? Have they asked 5 whys? Why the bug was deployed into production? Why there was not enough testing before deployment? Why integration testing was only done with low concurrency? Why standard release testing procedure is missing? Why there's no synthetic traffic testing and gates before rolling to 100% in production?