This is a big tell. Don't fall for Marketing spin above. They didn't take this threat seriously, will they take any others seriously until it hits the mainstream media? I would look closely at those you trust with authentication if you outsource this critical piece of infrastructure.