They recently had another breach:
Update as of Thursday, September 15, 2022
Our investigation determined that the threat actor gained access to the Development environment using a developer’s compromised endpoint. While the method used for the initial endpoint compromise is inconclusive, the threat actor utilized their persistent access to impersonate the developer once the developer had successfully authenticated using multi-factor authentication.
I don't trust a software company which has idiot developers like this with my data. Any IT professional should be able to keep their computer clean.
It's OK if a breach like this occurs every few years. But having several incidents within a few weeks to each other just reeks of incompetence.