They haven’t particularly made a comment on the situation so much as acknowledged it’s happening. They seem to be going with the story that they had nothing to do with it and this is news to them. Hope to hear more from them soon so we can find out more about the situation, how and why this happened, etc.
(The sceptical tone isn’t because of disbelief of Collin, it’s because we don’t know enough about the situation to be able to say Collin is or isn’t telling the truth here.)
A side note. Proprietary closed source software totally uses opensource components. They may or may not disclose it, and they have to offer up what they used, however they are often making the disclosure a fine print item. We support a large proprietary software, we see the memos come through about what bug fixes or opensource library has an issue or vulner. The customers can aign up for this also, but I bet 99% of them don’t sign up. And if they were polled on if the software if it was open/closed I’m sure they would say closed only