Keycloak is fairly easy to maintain. I run a deploy in AWS/ECS, and nearly never needs to be touched... except when an upgrade is required. Every upgrade has been challenging, starting with change to Quarkus, followed by removing dependencies from the docker images.

But when it's not being upgrade, it's fantastic. Many thanks to Red Hat.

This is not a new breach, it is a disclosure of additional findings from the last breach.

I'm not sure why you keep saying this as if it makes the fact that they lied about the most recent breach any better.

Because people who don't bother to read the article assume it's a new breach, as we can see in the comments here ("another breach"). I'm not saying that it makes it better or worse.