I find it ironic that they plan to let users know they've been compromised via the newsfeed. What about users who have either deleted or never log in? How will they find out? Is their likely defense 'ignorance is no excuse' really a great defense if the only way to avoid ignorance in this case to log into their platform?