Indeed, how GitLab handled the incident was exemplary. That is entirely different topic.