Re: Whataboutism.
It seems the security which their website touts ("Each step of every one of our services is conducted by experienced industry professionals in accordance with strict quality and security standards.") was designed and developed for the physical security of their documents.
Some 'bright' soul decided scanning those documents would be a new revenue stream and they had no clue how to secure it or keep it secure.
Ignoring priority updates that close actively exploited malware holes is suboptimal.