They did nothing good here. They fucked up and took forever to fix it. Please stop apologising for them.
We know they didn't push a quick hacky fix live. I think it's quite likely (due to the resources they have) that they deployed a proper fix, not sacrificing security for a faster response. I could be wrong.