He hasn't apologized for the feature existing, or acknowledged that it is a security problem (information leak). He apologized for being an asshole. He hasn't acknowledged that its the wrong default.

His judgement is so poor we simply can't trust him to make correct decisions about the software he is building, there are doubtless other security issues.