Yes, I love how iThemes owned up to the problem and went to work to fix it immediately and kept the public up to date. It's analogous to having a boss who screws up and does NOT admit it. Everyone knows the boss screwed up. So pretending it didn't happen solves nothing and causes people to instantly lose respect that is extremely difficult to get back that respect. Same thing with plugin and theme developers whose product develops a problem dealing with security or functionality. By having blog posts, email lists, twitter followers, etc., the proper and necessary communication can get out to clients and user as quickly as possible. Companies who delete unpleasant tweets instead of responding to legitimate concerns, is another poor way of dealing with your paying public! Thanks for sharing.