Maybe. They've got a lot riding on these things being secure, a bit of money now is probably a lot better than lots of money later. A lot of companies probably

Maybe. They've got a lot riding on these things being secure, a bit of money now is probably a lot better than lots of money later. A lot of companies probably have the same risk/reward, but can't place it neatly in a budget. This may also be part of reaching out to developers, and gaining some trust back. They've probably taken quite a hit recently, and I think they've somewhat relied on being the cool place to work.