So, installing malicious software means your information can be accessed? SHOCKING.
If they told everybody "your info was hacked" while they hadn't cleaned it up yet, a bunch of folks would have logged on and changed their passwords, immediately exposing the NEW ones. You clean up first, then you engage the PR folks.
I think if you want the desktop it's going to take another linux-kernel-level effort around the GUI. The question is do we keep trying to put more band-aids on X11 or do we design something from the ground up that everyone can agree on?
The hardest part of climbing the ladder of success is getting through the crowd at the bottom.