They're essentially confirming that their systems continue to be insecure and guaranteeing that your personal information will be leaked to third parties again in the future.
Yes. I understand that lawyers in a big corporation have a big responsibility to minimize liability because it measures in the billions. In this case they totally failed to take into account the direct damage this will do to their brand perception. If the press decides to pursue this, it's going to hurt them badly.
Sony doesn't seem to have much of a brand left to protect. Since the root kit debacle it's just been one thing after another. They seem actively customer-hostile.
Brand per se has been dragged through the mud, but Playstation is still a very valuable property, particularly in Europe. Frankly they have a lot to lose with this nonsense.
The point is that Sony is disclaiming responsibility for anything it does wrong.
It's like saying, "Well, I'll work as an engineer for you, but I refuse to be held responsible if the bridge collapses." Even the nuttiest libertarian could find reasons to pass laws forbidding that kind of contract. And even if it's legal, I wouldn't drive on that bridge. (Or would I? If everyone does it and it looks safe enough...)
This is even worse when I think about it. It's more like buying a plane ticket, being in the airport, and suddenly the pilot goes "I am not legally liable if I crash the plane while I'm drinking on the flight."
Though a better analogy is that it's like buying your ticket, passing security, being boarded and right as you are about to enter the plane - the stewardess tells you you have to sign this agreement that the airline is not liable. You have the option of not agreeing to those terms - but then you will have to turn around and find another flight on another airline with no recourse for a refund on your ticket.
It's not that the bully isn't willing to accept responsibility. He just wants to deal with each complaint individually. In a dark alley with no witnesses.
I'm a sysadmin actually. No one can give that guarantee, but when I apply for a job I sure as hell don't put in the contract that I'm not liable for any security breaches that might occur.
If I leave an outdated version of SSH open to the internet, allow root login, password authentication, and set it to 'p4ssw0rd', then I'd fully expect to suffer some consequences.
Thanks for the clarification Sony.