I find it incredibly uncommon to see real repercussions (even temporary ones) resulting from cyber security failings of companies.

In this case, some large part of the issue was in deceptive (at best) promotional material. Does that mean people understand messaging, even if they don't understand encryption?

I'm sure many readers here have seen incredible breaches of trust and security, such as Equifax, go almost entirely without punishment. This is an interesting case in the opposite direction. It is worth noting for balance that Zoom does appear to have favoured usability, and successfully so.