What a bad situation, and I genuinely feel for them. I do think they blamed a lot of other people and I think a section on what lessons they have learned themselves might be a good idea/look.

At minimum you want to have off site backups, preferably readonly (like an S3 bucket or whatever). And test the restore process.

I hope they get it sorted, what a mess.