Good...
With that letter he has gained lots more respect and confidence from the public than those companies whose strategy in similar cases consists in:
a) Deny everything.
b) Sue whoever found the bug.
c) If that fails, blame the user.
d) Grumpily recognize the issue.
e) Take a year to fix the bug.
f) State that "Lessons have been learned".
g) Wash, rinse, repeat.