All B2B industrials; not consumer tech companies that get reported on ad nauseam in the media. Lockheed's product lifecycles are measured in decades; Yahoo's in months. I don't think it's a fair comparison.
Agree that Yahoo had really shitty product focus, but that was true 10 years before she joined. Like you said, Yahoo had been warned about MD5 nearly a decade ago -- security had obviously been deprioritized for years before she arrived.
What did she do? She stopped the bleeding long enough to get a sale done. She basically acted like a private equity CEO. If you view her job as extracting the most value out of Yahoo, she did a pretty good job of that.