> one theory: the new release had a serious security issue, leaked a bunch of data, and it wasn't disclosed

The Auth/DDoS event adds a bit of weight to OP's original theory. It's not a justification on its own.