Replying to @IncompleteRules
From what I've seen, it looks like Twitter made their announcement before the external audit had concluded… A high profile issue could have various causes (exploit, human failure…) but would also have severe consequences (eg. a dissident dies).