Companies can be evil on a structural level. But also, companies that aren't evil on a structural level, can be parasitized by evil individuals. Unless the company actively pursues hiring evil individuals, why would you hold the latter against them?
The point of companies having reputations is to predict what they'll do, and thereby trade with companies for which trade with them will predictably be positive-sum, and avoid trade with companies that would predictably be zero-sum or negative-sum.
A company itself being evil on a structural level, predicts that in the future it will do many zero- or negative-sum things, regardless of employee turnover.
A company that is not evil on a structural level, hiring one evil individual, who does an evil thing and then gets fired, doesn't predict any future evil behavior from the company.
It's what would be true for the situation outlined in the root comment of this subthread to pertain: that it was "an intentional product decision."
For that to be true, there would need to be an individual that made that decision, with the thought-process I outlined in my first comment. Such a thought-process wouldn't just be sociopathic (zero-sum), it'd be negative-sum/"evil". It would be a choice to hurt both drivers, and the corporation itself (when people inevitably find out), and oneself (when blame is inevitably pointed at them.) For what? Who knows. Evil. (Industrial sabotage, maybe.)
Obviously, like another commenter said, this wasn't an intentional product decision. (It was maybe an intentional project management decision, but one made in by no one individual.)
But that same commenter rhetorically asked why it mattered whether it was an intentional product decision or not. That's why I explained the difference. Acts of evil individuals that have parasitized good companies shouldn't reflect on those companies (once the evil individual is removed.) Acts of structural evil — acts that are generated from an algorithm the corporation is following as a whole, and would still follow if you replaced every employee ship-of-Theseus style — should reflect on the company itself.
This, of course, is an example of the latter kind of act, one that should reflect on the company itself.
But it's important to distinguish these acts from acts that are, in fact, committed by bad actors that have "infiltrated" the company. For the same reason that we distinguish "terrorism" from "domestic terrorism." The latter — domestic terrorism — can, in some ways, be "a reflection of the culture of the country." When there's a school shooting, we can ask what the country is doing wrong that leads to people like this cropping up. But the former — plain old terrorism — is not, and cannot, reflect on the country. The person who committed the act wasn't even an enculturated citizen of the country, so what would it tell us about the country?