Also, customers should switch away from Cisco as they clearly do not take security at all seriously.

They'll fire the QA department they've been ignoring for 10 years, but they won't fire the CEO.

Yup. For example Symantec's "A tough day as leaders" blog post (of course no longer available shortly after they wrote it but it's on the various archives) is basically this formula. "Oh dear, a bad thing happened, we'll fire a junior employee but change nothing".

Fire the guy that dug the hole he was told to dig.

The difference between a manager, a lead engineer, an engineer, and an operator are the expectations of self-directed management.