Why haven't they do this before? Cause now this looks like damage control, they have to show they care because they are losing money. But tooo late, compromised

Why haven't they do this before? Cause now this looks like damage control, they have to show they care because they are losing money. But tooo late, compromised services opened significant area for others, only in question is quality, but quality is also defined by people using those services and lot of people want to use something not compromised -> if you ask me now is right time to get dirty and do the job.