> I think this article doesn't just blame the victims of those attacks, but subjects them to public ridicule. Neither helps anyone, least of all end users.

I think public ridicule is necessary as basically the only way users have to encourage security. Users are being harmed by a company penny pinching on security and virtually never receive any compensation.