Re: NDA ...
If the crooks started talking Uber could sue to get their money back and the crooks would have a hard time convincing their next victim that paying money would buy more than a minute of silence.
The hard parts to understand are why the crooks signed their own names to an NDA and why Uber believed that public knowledge of their lack of security could make their reputation any worse. What might make a little sense is a contract not to distribute so Uber would not face any competition when selling personal data to everyone and his dinosaur.