Security has nothing to do with feelings. Given the amount of should-haves in their explanation this should be a welcome wake-up call to them, a free audit. Other than playing the victim card, they handled it quite well.

Nothing better to sharpen your skills and higher your standards than a _good crisis_