Exactly. By doing the right thing, Microsoft didn't erase their liability in this. What they did do though was limit that liability and stop them from getting deeper in a hole.

By acting quickly, they gained some important PR points, but that doesn't erase the offense. This is especially true since they admitted their offense. My guess is that all is left is to negotiate the level of compensation.