A reasonable reaction?
It is like they just listened to the concerns and immediately fixed the problem. Maybe their fixes created three times as many vulnerabilities, because otherwise I'm going to start questioning everything I thought I knew about how IT works?