We, the company that doesn't understand security, can't tell whether this was exploited, therefore we confidently assert that everything is fine. It's self cons

We, the company that doesn't understand security, can't tell whether this was exploited, therefore we confidently assert that everything is fine. It's self consistent I suppose but I wouldn't personally choose to scream "we are incompetent and do not care" into the internet.