[audeyisaacs]

What is an acceptable level of whitewashing when it comes to security incidents?

In my opinion, you are correct. Cloudflare is making it sound a little too clean.

[koolba]

> What is an acceptable level of whitewashing when it comes to security incidents?

If you claim to be a company that takes security seriously: zero

This is maximum levels of shit hitting fans. All their customers are potentially impacted, some horrifically so. They need to alert them immediately with red alarms blazing.