As this is the SEC, making a fine on behalf of investors, it reflects the impact to investors. That being, that unfortunately most users continue to use platforms in spite of serious security and/or privacy concerns. Combined with weak consumer protection, this makes the consequences for the company fairly minor.