Before the revelations appeared, these companies did little to fight it. There are ways of acting against it proactively without breaking any NDA's and laws.

Only when confidence in their business declines because people found out exactly how complicit they'd been, they decide to do something about it.

We know where the priorities really are. In this case it's a publicity thing. They've been caught with their pants down.

If there's no source code or it's"cloud" based then I refuse to do business now.