Mozilla says they have "high standards for vendors" in their latest statement, but why didn't those standards apply back when they were told about this in March

Mozilla says they have "high standards for vendors" in their latest statement, but why didn't those standards apply back when they were told about this in March 2024? https://krebsonsecurity.com/2024/03/mozilla-drops-onerep-aft https://krebsonsecurity.com/2024/03/mozilla-drops-onerep-aft...