Not a journalist or a reporter, posts aren't meant to be professional. The only reason I even write any of my posts is because companies DO NOT disclose incidents at all, so I have to do it for them.
I thoroughly enjoyed the post and thought your tone was appropriate, entertaining, and kind of kethartic. You didn't call them names, engage in ad hominem, or do anything click-batey. You were understandably irritated at how they talked to you and how they were clearly trying to hide a massive exposure from their users. And then you shredded them with data.
A+ - And thanks for trying to keep folks like this honest!
To be fair that doesn't appear to be an ad hominem because the author lists many facts supporting his assertion none of which was particularly personal. Nor is it name calling as he compared the CEO to a toddler, but did not say that he was a toddler.
A+ - And thanks for trying to keep folks like this honest!