Playing the devil's advocate here, but what do you think they should be doing, in case these are a result of password re-use and similar user errors?

Hard to say or prove that changing your password actually protects you. best method to avoid is to not have it running. Like I mentioned before when you run something that uses a server to tunnel through your firewalls you have to feel this server is trusted. i do not trust a server I rather run a desktop sharing tool like uvnc and control when it is on and off and have no unknown party tunnel .

In the end when I was asked to install teamviewer (I use Linux BTW) I could see all thr process even after I turned it off. i would find myself killing off the 3 or so process that maintained a connection to a server. Heck i get alot of I am silly and its secure. Now I have not had anything happen to me and yet to see anyone beyond stories online. Do not take my word for it run a debugger or trace it wireshark do what you will you will get a suprise. sorta like when I ran skype in linux and traced what it accessed (scary stuff)

Changing the way the ID / password generation is done and requiring additional verification when a new device wants to connect to an existing TeamViewer install

Send out an email saying "We're seeing increased attacks on Teamviewer accounts with reused passwords. Please reset your password, especially if it has been used on other sites."

No need to take blame - I gather that TV is not exactly a transparent organization, and perhaps their customers are less amenable to security update or outage post-mortems than most HN readers, but they ought not stick their heads in the sand.

As a paying customer, I should not have to find this out through Reddit and HN.