That’s not the only thing though. E.g. the collect PII, so I assume there are regulations to abide by etc.
Just stop trying to make excuses for these people. They screwed up, and based on this press release, don't seem to have any interest in actually correcting those mistakes.