It's a well(ish) known org with well known product, and they seem to have been vulnerable. If they had attacked a deli in Newark, would we be having this conversation?

Canonical literally has a DOD team. They are a military contractor