it's good to hear...
...when a company gets it. This sort of thing needs an award of some sort, as an antidote to all the 'up yours' responses and "we take security very seriously" empty canned statements from leaky megacorps.
Design idea for the award - an exclamation mark, in purple...