Why the outrage?
It's their system. The users don't pay (money) for it. Do we imagine that any other company from a corner shop to a mega corp would willingly publish a new self-critical report?
Of course, the stupid bit is that they thought they could keep it secret. In a company that big it was bound to leak out.
Also: why is this article in the 'security' section?