It's not really misleading. A lot of people here use Bunny and this is a relevant security incident. It's not a major failing but rather a "hey shit happened come make sure if it applies to you that you respond in kind".

NGL it's the exact wording I'd personally like to see from a product that had an infra provider have an incident just so that I can mentally tune in enough to figure out if I need to care.

Do I need to post the Rickover responsibility copypasta again? Simply put service providers own their outsourcing decisions and those consequences. Getting popped by shitty hosting services is a risk of using those services.

Bunny is doing the right thing here and owning it.