The system is still broken, regardless of what you think of GP's actions. "You shouldn't steal our customers' passwords" isn't a clever response to being told that your customers' passwords have been stolen and sold for $50K.