They only did the right thing after getting caught openly doing the wrong thing, so I’d say I’d still be pissed.

They should have never put the system in place with such a simple vulnerability (which to me) says they take such a laxodasical approach to security that I wouldn’t trust them even now.