> have a decent crisis management or PR firm on retainer.
On what basis do you say they have a firm on retainer?
I think many/most CEO's in this situation would make some calls to get advice on how to manage the situation -- I don't that is a red flag.
If they don't take strong, concrete steps to mitigate these kinds of problems in the future, I will have less confidence and trust in their company.
... have a decent crisis management or PR firm on retainer.
Which might be as much of a red flag as the initial fuckup...