Their only gross incompetence was not informing customers in a timely manner, which I could forgive them for.
Having a security breach is something that happens to, quite literally,
every hosting provider.
I say all this as someone who dropped Linode for DO due to not being able to afford them anymore.
