> But, the data breach exploiting 3 vulnerabilities seems to be bad luck

To me it seemed to stem from at least one fundamentally alarming design problem on their part, not "bad luck". [1]

[1] https://news.ycombinator.com/item?id=18203396