I've worked for one of the NYT's subsidiaries and personally witnessed how their security posture changed (for the better!) after they were acquired by NYT. I was told that these downstream changes were due to policies laid out by Runa and Runa's team.

NYT will come to regret this decision. Hopefully, for their employees/readers/journalists/sources/etc. sake, it's only because of the bad publicity.