@Matt - you said

There was nothing more or less tested about 2.8 than previous releases.

and to me, that's the problem. You've had 4 releases in less than 5 weeks. One because the developers admittedly just missed a few places where a known vulnerability existed, and this one which apparently was actually a vulnerability for quite some time.

Maybe with the recent track record of releases there SHOULD be more testing going on. A lot of people are getting sick of updating their sites so frequently and if you don't want to start losing users to other platforms that at least appear to be more stable, action needs to be taken.

Acting like nothing's wrong isn't what most of us want to hear right now.