I imagine that your example scenario would involve talking to your users to keep their trust and owning up to mistakes if you were running a free service whose security ended up being affected by those mistakes.