This decision creates incentive for people to be honest when they have compromised the security of their customers. Then at least buyers can be aware of the threat they have been exposed to. The alternative is to swing hammers and then no one will ever admit when they fucked up.