I don’t like all of the CIA rumor crap either, but I do appreciate companies realizing the public doesn’t have a tolerance for these sorts of bugs. From my perspective success would look like the issues being resolved before release and not in the first update.
ETA: (For clarity) That is to say not tolerating known security / privacy issues in the initial release, not that all bugs will be fixed.
