Which is why they should move to allow-list federation, and only allow in other instances they can firstly check to ensure it won't happen again.