No doubt.  But the whole thing is sort of non-news, in that they had already had that nasty incident when it was found that various intelligence agencies and malware profiteers alike were injecting hostile java into their streaming ads, that was a few years back and had been going on for a long time when it was made public.  There's little chance they didn't know, so for most of us that incident served as Fair Warning.  This latest is just a smelly little footnote, they did plenty that we just don't know about yet.