How does this not result in FortiNet customers suing, to say nothing of shareholders and the FTC?

To intentionally design an insecure obfuscation for customer confidential traffic, and then keep it in place for a year and a half after someone discovers and reports it, is obviously negligent and causes real damage to the companies who bought this defective product.