This is essentially some good PR to lower the bad PR they’re getting. The damage is already done, whatever narrative they were pushing worked. Now they get to say “We did bad things and we’re aware of it. We have an oversight board and we have a system in place. We pinky promise we will continue to improve how we handle these things in future.”

Until next time it happens again.

Sorry about what happened to your friend.