What is an acceptable level of whitewashing when it comes to security incidents?
If you claim to be a company that takes security seriously: zero
This is maximum levels of shit hitting fans. All their customers are potentially impacted, some horrifically so. They need to alert them immediately with red alarms blazing.
Comments
What is an acceptable level of whitewashing when it comes to security incidents?
In my opinion, you are correct. Cloudflare is making it sound a little too clean.
If you claim to be a company that takes security seriously: zero
This is maximum levels of shit hitting fans. All their customers are potentially impacted, some horrifically so. They need to alert them immediately with red alarms blazing.