I think that's the bigger issue here. For 3 years there was a vulnerability. And when they did find out about it, they chose not to disclose the information. Why? B/c there wasn't that many people using it. And so because of that, let's shut down G+, rather than be scrutinized about how they chose not to let it be know, that users information were available through this vulnerability.
this is the same company that threatens other companies that if they don’t patch a vulnerability fast enough, the time will release it to the public. class act