Mozilla says they have "high standards for vendors" in their latest statement, but why didn't those standards apply back when they were told about this in March 2024?

https://krebsonsecurity.com/2024/03/mozilla-drops-onerep-aft...