I'm encouraged by this, and the steps they took to implement additional precautions for the future. I would guess that was the goal of this release.

This is effectively best security practices IMHO.

I appreciate their transparency. I'm not a 1Password customer, but this earned some respect from me.

what's confusing?

1. because people want to know if their for-money proprietary password storage company got hacked 1. because if in the future they actually get owned, "oh yeah, it sorta happened another time also but we didn't say anything" is a terrible look

It's almost a standard practice now, most companies do this.

Bingo.