based on everything i've experienced and heard about Zoho i'd say this incident is a symptom of issues rather than a cause
Yep, this incident shows deeper problems. As an outsider, I now question their security team, their devops, their entire company and internal policies.