Yeah, that was basically my reaction, too. There was also some news that the CEO would now be taking responsibility for security, which had me similarly questioning what the hell they were doing so far.
Surely, the CEO is responsible for everything. So, did they just completely forget that security is also part of that?