Way to not apologize or really 'fix' the issue. For all users who don't opt out (which they don't say will be default) this vulnerability will still exist and b

Way to not apologize or really 'fix' the issue. For all users who don't opt out (which they don't say will be default) this vulnerability will still exist and be exploitable. They'll just make it (somewhat) harder.