that’s naive. a statement like that is just marketing, as much as “we take your privacy/security very seriously” after an incident.

it has no or almost no connection to job performance of the C suite.

FWIW, I agree there is zero question that he needed to be sent packing immediately.