The thing they didn't handle very well was raising awareness, imho. There was no proactivity until I finally received an email from them urging me to upgrade my framework. I keep up on news about WP and vulnerabilities and what not, but how many 'normal' clients do? An earlier email blast for customers should have been a priority.