If they fixed the exploit then what do you want them to do? Do they need to wait an arbitrary amount of time before setting it to resolved?

they could have explained a bit better with proper postmortem and steps taken to improve, before marking it as resolved

They are no longer exposing anything, so they no longer have an incident.

Their customers now have an incident that will be resolved once their secrets are rotated. Maybe they also need to do previous intrusion forensics… In any case, not triggers problem anymore.

I like the fancy gradient INCIDENT REPORT image as well. At least it looks fancy and AI-ey