I too have been really shocked at how nasty our community has been regarding this issue.
When a company provides full disclosure people are shocked and abandon the platform.
Every company has bugs. Everyone eventually gets breached. If a company is honest with what happened, follows up with their users, and fixes it, what more can you ask for?
Should it have happened? No. Did they find the issue? Yes. Did they fix it? Yes. Did they disclose it? Yes. Perfect, thanks.
edit: and enabling facebook tracking on customer pages...
I mean, worst of all, many of them are Web Developer means there is a very high probability they have make mistakes /bugs in the pass, big or small. Which put them in the category of hypocrite.