I'm not so sure. As far as I can see, they've still only fixed 1 of 3 security holes - which violate their own privacy policy - and yet have found the time to both push this funding through (not a small effort) and highly publicize it. Should they not be worrying more about their users' privacy than their PR? I know that these are different 'roles' in the company, so it's not as simple as pulling people off one thing and on to another, but it does feel a little slimy.