As more and more eggs end up in the same basket, the scope and impact of even small incidents gets ever worse. The complexity of the interconnections is such that no one has a complete grasp of it anymore. Atlassian took itself and its customers offline for ~2 weeks last month following an accident with a maintenance script.

The potential intrusion is bad, but I can't really fault them for taking the time to make sure everything is secure before releasing anything for use. Given the geopolitical situation and the damage potential of current malware, they really didn't have much of a choice.