Hacker News Reader

They do mention removing bundled installers and implementing virus scans, both of which seem targeted at removing malware from the site.

I think the issue was that people who thought that bundling malware was ok, are still employed there.

Not necessarily with any responsibilities though.

If you're employed somewhere, you have responsibilities. Otherwise what's the point?

If I'm a mere employee, my chance to decide about what happens around me (or on my employer's website) might be limited.

I’m a mere consumer, and my only option in reaction to the abdication of personal responsibility is to never use the product again.