It's not an anecdote: it was a wide-reaching security issue that was objectively bad and which irrefutably happened.

Anyway, I think you moved the goal posts. You were implying they should not be included in the group to be sceptical about, rather than any kind of scale.