If they weren't competent enough to do that before, what makes you think they're competent enough to do it now? For all we know, they've "fixed" the issue by s

If they weren't competent enough to do that before, what makes you think they're competent enough to do it now? For all we know, they've "fixed" the issue by switching to unsalted MD5 password hashes.