What do you find weird in the tone? I find it succinct, confirming they were already aware of the issue and that they are already working on a (bulk) solution.
If it hadn't taken them almost a year and actual subdomain takeover to fix it, I might be inclined to believe them.
If it hadn't taken them almost a year and actual subdomain takeover to fix it, I might be inclined to believe them.