I think that's the bigger issue here. For 3 years there was a vulnerability. And when they did find out about it, they chose not to disclose the information. Why? B/c there wasn't that many people using it. And so because of that, let's shut down G+, rather than be scrutinized about how they chose not to let it be know, that users information were available through this vulnerability.