Except that’s not true. Somehow, 23andme missed the almost certainly anomalous activity on thier network that lead to the extraction of 6.9 million users’ data. Missing the activity associated with the massive data dump, designing thier system to allow for that? 100% thier fault.

One should not be able to use a set of hacked accounts to dump that much data. That’s a design flaw.